type=DAEMON_START msg=audit(1718702253.723:7917): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=684 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1718702253.731:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.780:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1718702253.926:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1718702253.926:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1718702253.926:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1718702253.928:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1718702253.934:11): pid=706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.939:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702253.955:13): prog-id=18 op=LOAD
type=SERVICE_START msg=audit(1718702253.966:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.973:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702254.014:16): prog-id=19 op=LOAD
type=BPF msg=audit(1718702254.014:17): prog-id=20 op=LOAD
type=BPF msg=audit(1718702254.014:18): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1718702254.018:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702254.160:20): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1718702254.587:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.764:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.929:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.957:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702260.693:25): prog-id=23 op=LOAD
type=BPF msg=audit(1718702260.693:26): prog-id=24 op=LOAD
type=SERVICE_START msg=audit(1718702260.743:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702260.833:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702260.947:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.236:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.257:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.361:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1718702263.723:33): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1718702263.727:34): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:35): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:36): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:37): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:38): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702264.001:39): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=ACCT_LOCK msg=audit(1718702264.063:40): pid=895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1718702265.072:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.105:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.111:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.114:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.117:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.121:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.127:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1718702265.145:48): pid=914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.147:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702265.147:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702265.593:51): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1718702265.598:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.624:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.705:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702266.386:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.586:56): pid=1666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1718702266.595:57): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1718702266.596:58): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1718702266.596:59): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1718702266.715:60): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.715:61): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:92:3f:76:ae:b3:c4:29:f5:3c:2c:a0:b6:51:ea:7a:b4:2a:ad:64:ca:1e:07:10:fa:50:6f:d7:e1:04:76:6a:e7 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1718702266.842:62): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.842:63): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1718702266.849:64): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1718702266.849:65): pid=1667 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1718702266.849:65): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc73d69b50 a2=4 a3=3e8 items=0 ppid=1140 pid=1667 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702266.849:65): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1718702266.855:66): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702266.927:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1718702267.017:68): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1718702267.017:69): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1718702267.017:70): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1718702267.017:71): pid=1772 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1718702267.017:71): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe1b1df310 a2=4 a3=3e8 items=0 ppid=1 pid=1772 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702267.017:71): proctitle="(systemd)"
type=USER_START msg=audit(1718702267.018:72): pid=1772 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702267.115:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1718702267.124:74): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.125:75): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1718702267.126:76): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1718702267.175:77): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.175:78): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.176:79): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702267.217:80): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702267.217:81): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702267.218:82): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.218:83): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.221:84): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702267.235:85): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702267.235:86): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702267.238:87): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.238:88): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.240:89): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1718702267.355:90): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1718702267.355:91): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D792062696E642062696E642D7574696C7320686170726F7879206874747064206E65742D746F6F6C73 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1718702267.356:92): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1718702267.357:93): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1718702271.412:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702281.023:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1718702282.816:96): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache"
type=GRP_MGMT msg=audit(1718702282.843:97): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache"
type=ADD_USER msg=audit(1718702282.910:98): pid=4058 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=ADD_GROUP msg=audit(1718702283.671:99): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named"
type=GRP_MGMT msg=audit(1718702283.675:100): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named"
type=ADD_USER msg=audit(1718702283.726:101): pid=4075 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="named" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1718702291.043:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702291.063:103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702291.063:104): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1718702292.634:105): auid=1000 ses=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1718702292.634:105): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7fe6e3800000 a2=3594aa a3=0 items=0 ppid=4094 pid=4104 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702292.634:105): proctitle="/sbin/load_policy"
type=ADD_GROUP msg=audit(1718702292.821:106): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy"
type=GRP_MGMT msg=audit(1718702292.834:107): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy"
type=ADD_USER msg=audit(1718702292.902:108): pid=4117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="haproxy" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702293.321:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702293.572:110): prog-id=25 op=LOAD
type=BPF msg=audit(1718702293.572:111): prog-id=26 op=LOAD
type=BPF msg=audit(1718702293.572:112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.572:113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.573:114): prog-id=27 op=LOAD
type=BPF msg=audit(1718702293.573:115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.575:116): prog-id=28 op=LOAD
type=BPF msg=audit(1718702293.575:117): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:118): prog-id=29 op=LOAD
type=BPF msg=audit(1718702293.578:119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:120): prog-id=30 op=LOAD
type=BPF msg=audit(1718702293.578:121): prog-id=31 op=LOAD
type=BPF msg=audit(1718702293.578:122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:124): prog-id=32 op=LOAD
type=BPF msg=audit(1718702293.580:125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:126): prog-id=33 op=LOAD
type=BPF msg=audit(1718702293.580:127): prog-id=34 op=LOAD
type=BPF msg=audit(1718702293.580:128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:129): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1718702293.605:130): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-1.7.0-12.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.605:131): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-bdb-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.605:132): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:133): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-openssl-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:134): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:135): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:136): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:137): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:138): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:139): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:140): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-doc-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:141): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-tools-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:142): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-filesystem-2.4.57-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:143): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rocky-logos-httpd-90.15-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:144): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:145): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-bind-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:146): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:147): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mailcap-2.1.49-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:148): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-core-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:149): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_lua-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:150): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:151): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_http2-2.0.26-2.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:152): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:153): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="haproxy-2.4.22-3.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:154): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1718702296.654:155): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1718702296.654:156): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1718702296.657:157): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.657:158): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702296.658:159): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702296.658:160): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702296.661:161): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702296.675:162): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.675:163): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702296.676:164): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702296.676:165): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702296.678:166): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702296.693:167): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.693:168): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1718702297.328:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.338:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.338:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.339:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702297.350:173): pid=1140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1718702297.353:174): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1718702297.353:175): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702297.353:176): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1718702297.357:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.368:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.370:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.372:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.374:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.375:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.376:183): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.380:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.382:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.387:186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.389:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.580:188): prog-id=35 op=LOAD
type=BPF msg=audit(1718702297.580:189): prog-id=36 op=LOAD
type=BPF msg=audit(1718702297.580:190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.580:191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.581:192): prog-id=37 op=LOAD
type=BPF msg=audit(1718702297.581:193): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:194): prog-id=38 op=LOAD
type=BPF msg=audit(1718702297.583:195): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:196): prog-id=39 op=LOAD
type=BPF msg=audit(1718702297.583:197): prog-id=40 op=LOAD
type=BPF msg=audit(1718702297.583:198): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:200): prog-id=41 op=LOAD
type=BPF msg=audit(1718702297.584:201): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:202): prog-id=42 op=LOAD
type=BPF msg=audit(1718702297.584:203): prog-id=43 op=LOAD
type=BPF msg=audit(1718702297.584:204): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:205): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.595:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.597:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702297.599:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.618:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.619:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.621:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.622:212): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.631:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.652:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.655:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.666:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.670:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.675:218): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.684:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.685:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.686:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.687:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.688:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.689:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.690:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.691:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_SHUTDOWN msg=audit(1718702297.699:227): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.703:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=DAEMON_END msg=audit(1718702297.706:7918): op=terminate auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=successAUID="root"
type=DAEMON_START msg=audit(1739145717.209:5986): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=703 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1739145717.225:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1739145717.252:6): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1739145717.252:6): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe54c347f0 a2=3c a3=0 items=0 ppid=708 pid=718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145717.252:6): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1739145717.252:7): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1739145717.252:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe54c347f0 a2=3c a3=0 items=0 ppid=708 pid=718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145717.252:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1739145717.252:8): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1739145717.252:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe54c347f0 a2=3c a3=0 items=0 ppid=708 pid=718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145717.252:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1739145717.255:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1739145717.260:10): pid=725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.266:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145717.280:12): prog-id=18 op=LOAD
type=SERVICE_START msg=audit(1739145717.294:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.299:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145717.308:15): prog-id=19 op=LOAD
type=BPF msg=audit(1739145717.308:16): prog-id=20 op=LOAD
type=BPF msg=audit(1739145717.308:17): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1739145717.320:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145717.324:19): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1739145717.336:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.345:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0e5cc0c9fd0244e58c997fafddb91c32 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.356:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145717.577:23): prog-id=23 op=LOAD
type=BPF msg=audit(1739145717.580:24): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.580:25): prog-id=24 op=LOAD
type=BPF msg=audit(1739145717.580:26): prog-id=25 op=LOAD
type=BPF msg=audit(1739145717.580:27): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.580:28): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.580:29): prog-id=26 op=LOAD
type=BPF msg=audit(1739145717.580:30): prog-id=27 op=LOAD
type=BPF msg=audit(1739145717.581:31): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.581:32): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.583:33): prog-id=28 op=LOAD
type=BPF msg=audit(1739145717.583:34): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.585:35): prog-id=29 op=LOAD
type=BPF msg=audit(1739145717.585:36): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.585:37): prog-id=30 op=LOAD
type=BPF msg=audit(1739145717.585:38): prog-id=31 op=LOAD
type=BPF msg=audit(1739145717.585:39): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.585:40): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.586:41): prog-id=32 op=LOAD
type=BPF msg=audit(1739145717.586:42): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739145717.591:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145717.591:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.594:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145717.596:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145717.597:47): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145717.598:48): prog-id=33 op=LOAD
type=SERVICE_START msg=audit(1739145717.652:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145717.660:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145722.324:51): prog-id=34 op=LOAD
type=BPF msg=audit(1739145722.324:52): prog-id=35 op=LOAD
type=SERVICE_START msg=audit(1739145722.372:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145722.445:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145722.504:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145722.537:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145722.580:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145722.690:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ACCT_LOCK msg=audit(1739145723.874:59): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1739145725.690:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.713:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.716:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.720:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.724:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.728:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.737:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1739145725.749:67): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145725.752:68): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145725.752:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.146:70): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145726.148:71): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11116 suid=74 rport=51946 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145726.148:72): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11116 suid=74 rport=51946 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1739145726.164:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1739145726.238:74): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.238:75): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145726.298:76): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.298:77): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11116 suid=74 rport=51946 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145726.300:78): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145726.300:79): pid=11096 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145726.300:79): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffddd72ba00 a2=4 a3=3e8 items=0 ppid=10335 pid=11096 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145726.300:79): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145726.301:80): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739145726.335:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145726.386:82): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1739145726.386:83): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1739145726.386:84): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145726.387:85): pid=11320 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145726.387:85): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc8c4ef370 a2=4 a3=3e8 items=0 ppid=1 pid=11320 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145726.387:85): proctitle="(systemd)"
type=USER_START msg=audit(1739145726.388:86): pid=11320 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739145726.505:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145726.511:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145726.511:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145726.528:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0e5cc0c9fd0244e58c997fafddb91c32 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1739145726.535:91): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.536:92): pid=11554 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11554 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145726.537:93): pid=11554 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145726.579:94): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145726.579:95): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.581:96): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145726.607:97): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145726.607:98): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.608:99): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11554 suid=1000 rport=51946 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.608:100): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11554 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145726.611:101): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145726.611:102): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.612:103): pid=11096 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145726.631:104): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145726.632:105): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11578 suid=74 rport=52124 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145726.632:106): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11578 suid=74 rport=52124 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145726.712:107): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.712:108): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145726.747:109): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.748:110): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11578 suid=74 rport=52124 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145726.751:111): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145726.751:112): pid=11577 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145726.751:112): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffef3c32400 a2=4 a3=3e8 items=0 ppid=10335 pid=11577 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145726.751:112): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145726.752:113): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145726.766:114): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.767:115): pid=11601 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145726.768:116): pid=11601 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739145726.787:117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145726.812:118): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145726.812:119): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.812:120): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11627 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145726.863:121): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145726.863:122): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.863:123): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11601 suid=1000 rport=52124 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.863:124): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145726.865:125): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145726.866:126): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145726.866:127): pid=11577 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145726.880:128): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145726.883:129): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11698 suid=74 rport=52130 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145726.883:130): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11698 suid=74 rport=52130 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145726.953:131): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.953:132): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145726.988:133): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145726.988:134): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11698 suid=74 rport=52130 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145726.989:135): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145726.989:136): pid=11691 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145726.989:136): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffb40a2890 a2=4 a3=3e8 items=0 ppid=10335 pid=11691 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145726.989:136): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145726.990:137): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145727.000:138): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.000:139): pid=11720 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145727.001:140): pid=11720 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145727.044:141): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145727.044:142): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.044:143): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.084:144): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145727.084:145): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.084:146): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11720 suid=1000 rport=52130 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.084:147): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11720 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.086:148): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.086:149): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.087:150): pid=11691 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145727.099:151): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145727.101:152): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11736 suid=74 rport=52138 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145727.101:153): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11736 suid=74 rport=52138 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145727.163:154): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.163:155): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145727.201:156): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.202:157): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11736 suid=74 rport=52138 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145727.204:158): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145727.204:159): pid=11735 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145727.204:159): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd1ea7f190 a2=4 a3=3e8 items=0 ppid=10335 pid=11735 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145727.204:159): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145727.204:160): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145727.214:161): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.215:162): pid=11738 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145727.216:163): pid=11738 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145727.259:164): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145727.259:165): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.260:166): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145727.335:167): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145727.335:168): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F7069702E636F6E66202F6574632F7069702E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145727.336:169): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145727.338:170): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145727.344:171): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.345:172): pid=11754 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145727.386:173): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145727.386:174): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6B646972202D70202F6574632F646F636B65722F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145727.387:175): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739145727.387:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1739145727.389:177): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145727.395:178): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.396:179): pid=11757 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145727.437:180): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145727.437:181): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F646F636B65722D6461656D6F6E2E6A736F6E202F6574632F646F636B65722F6461656D6F6E2E6A736F6E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145727.437:182): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145727.438:183): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145727.443:184): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.443:185): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145727.445:186): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145727.445:187): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.445:188): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11738 suid=1000 rport=52138 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.446:189): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.447:190): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.447:191): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.447:192): pid=11735 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145727.461:193): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145727.464:194): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11766 suid=74 rport=52150 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145727.464:195): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11766 suid=74 rport=52150 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145727.533:196): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.533:197): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145727.568:198): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.568:199): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11766 suid=74 rport=52150 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145727.569:200): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145727.569:201): pid=11765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145727.569:201): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee5861540 a2=4 a3=3e8 items=0 ppid=10335 pid=11765 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145727.569:201): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145727.570:202): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145727.579:203): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.580:204): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145727.580:205): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145727.624:206): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145727.624:207): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.625:208): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.645:209): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145727.645:210): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.645:211): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11768 suid=1000 rport=52150 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.645:212): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.646:213): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.646:214): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.647:215): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145727.661:216): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145727.663:217): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11783 suid=74 rport=52156 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145727.663:218): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11783 suid=74 rport=52156 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145727.737:219): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.737:220): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145727.780:221): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145727.780:222): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11783 suid=74 rport=52156 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145727.782:223): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145727.782:224): pid=11782 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145727.782:224): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe71934b90 a2=4 a3=3e8 items=0 ppid=10335 pid=11782 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145727.782:224): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145727.783:225): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145727.793:226): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.794:227): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145727.795:228): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145727.845:229): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145727.845:230): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.846:231): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145727.915:232): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145727.916:233): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=657468746F6F6C202D4B2065746830207478206F6666 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145727.916:234): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145727.918:235): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145727.921:236): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.921:237): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.923:238): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11785 suid=1000 rport=52156 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.923:239): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145727.923:240): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145727.923:241): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145727.923:242): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145727.923:243): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145727.924:244): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11782 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145727.941:245): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145727.944:246): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11807 suid=74 rport=52166 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145727.944:247): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11807 suid=74 rport=52166 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145728.009:248): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.009:249): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145728.046:250): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.046:251): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11807 suid=74 rport=52166 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145728.047:252): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145728.047:253): pid=11806 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145728.047:253): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe892789c0 a2=4 a3=3e8 items=0 ppid=10335 pid=11806 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145728.047:253): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145728.048:254): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145728.056:255): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.058:256): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145728.059:257): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145728.106:258): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145728.106:259): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.107:260): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.158:261): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145728.158:262): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.159:263): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11809 suid=1000 rport=52166 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.159:264): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.160:265): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.160:266): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.162:267): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145728.175:268): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145728.181:269): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11825 suid=74 rport=52174 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145728.181:270): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11825 suid=74 rport=52174 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145728.243:271): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.243:272): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145728.287:273): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.287:274): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11825 suid=74 rport=52174 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145728.288:275): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145728.288:276): pid=11824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145728.288:276): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffccf25e3e0 a2=4 a3=3e8 items=0 ppid=10335 pid=11824 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145728.288:276): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145728.288:277): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145728.299:278): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.300:279): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145728.300:280): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145728.352:281): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145728.352:282): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.353:283): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145728.427:284): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145728.427:285): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D66202F6574632F79756D2E7265706F732E642F726F636B792D6164646F6E732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D646576656C2E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D6578747261732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792E7265706F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145728.428:286): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145728.429:287): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145728.432:288): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.432:289): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145728.470:290): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145728.471:291): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D626173652D726F636B79392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145728.471:292): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145728.472:293): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145728.480:294): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.480:295): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145728.481:296): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145728.481:297): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.481:298): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11827 suid=1000 rport=52174 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.482:299): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.482:300): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.482:301): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.483:302): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145728.504:303): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145728.505:304): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11847 suid=74 rport=52186 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145728.505:305): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11847 suid=74 rport=52186 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145728.570:306): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.570:307): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145728.607:308): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.608:309): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11847 suid=74 rport=52186 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145728.609:310): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145728.609:311): pid=11846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145728.609:311): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd748db8c0 a2=4 a3=3e8 items=0 ppid=10335 pid=11846 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145728.609:311): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145728.610:312): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145728.619:313): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.620:314): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145728.620:315): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145728.669:316): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145728.669:317): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.670:318): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.714:319): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145728.714:320): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.715:321): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11849 suid=1000 rport=52186 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.715:322): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.716:323): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.716:324): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.716:325): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145728.730:326): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145728.732:327): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11865 suid=74 rport=52190 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145728.732:328): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11865 suid=74 rport=52190 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145728.793:329): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.793:330): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145728.835:331): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145728.835:332): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11865 suid=74 rport=52190 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145728.838:333): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145728.838:334): pid=11864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145728.838:334): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeb9d64ec0 a2=4 a3=3e8 items=0 ppid=10335 pid=11864 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145728.838:334): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145728.839:335): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145728.847:336): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.848:337): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145728.849:338): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145728.898:339): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145728.898:340): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.899:341): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145728.953:342): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145728.953:343): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D6570656C392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145728.955:344): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145728.956:345): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145728.964:346): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.964:347): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145728.965:348): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145728.965:349): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.965:350): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11867 suid=1000 rport=52190 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.966:351): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145728.968:352): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145728.968:353): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145728.968:354): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145728.981:355): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145728.984:356): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11884 suid=74 rport=52200 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145728.984:357): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11884 suid=74 rport=52200 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145729.048:358): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.048:359): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145729.085:360): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.085:361): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11884 suid=74 rport=52200 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145729.087:362): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145729.087:363): pid=11883 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145729.087:363): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe140c6260 a2=4 a3=3e8 items=0 ppid=10335 pid=11883 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145729.087:363): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145729.088:364): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145729.096:365): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.098:366): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145729.099:367): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145729.145:368): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145729.145:369): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.146:370): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11887 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145729.206:371): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145729.207:372): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6F6470726F62652069705F7461626C6573 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145729.207:373): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145729.208:374): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145729.229:375): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145729.229:376): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.231:377): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11886 suid=1000 rport=52200 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.232:378): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145729.233:379): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145729.233:380): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145729.233:381): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145729.233:382): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.233:383): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145729.248:384): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145729.249:385): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11904 suid=74 rport=52208 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145729.249:386): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11904 suid=74 rport=52208 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145729.313:387): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.313:388): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145729.350:389): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.350:390): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11904 suid=74 rport=52208 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145729.352:391): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145729.352:392): pid=11902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145729.352:392): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdd25b8560 a2=4 a3=3e8 items=0 ppid=10335 pid=11902 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145729.352:392): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145729.352:393): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145729.362:394): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.363:395): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145729.364:396): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145729.410:397): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145729.410:398): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.411:399): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.516:400): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11906 suid=1000 rport=52208 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.517:401): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145729.518:402): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145729.518:403): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145729.518:404): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145729.518:405): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.519:406): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145729.531:407): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145729.532:408): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11926 suid=74 rport=52216 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145729.535:409): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11926 suid=74 rport=52216 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145729.600:410): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.600:411): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145729.638:412): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145729.638:413): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11926 suid=74 rport=52216 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145729.639:414): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145729.639:415): pid=11925 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145729.639:415): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd2d8ae7e0 a2=4 a3=3e8 items=0 ppid=10335 pid=11925 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145729.639:415): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145729.639:416): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145729.649:417): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.650:418): pid=11928 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145729.651:419): pid=11928 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145729.704:420): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145729.704:421): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.704:422): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11929 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145729.722:423): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145729.722:424): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.722:425): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11928 suid=1000 rport=52216 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.722:426): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145729.724:427): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145729.724:428): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145729.725:429): pid=11925 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11925 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1739145732.744:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145735.873:431): pid=11943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145735.874:432): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11943 suid=74 rport=52288 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145735.874:433): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11943 suid=74 rport=52288 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145735.935:434): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145735.935:435): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145735.965:436): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145735.965:437): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11943 suid=74 rport=52288 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145735.966:438): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145735.966:439): pid=11942 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145735.966:439): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc87054110 a2=4 a3=3e8 items=0 ppid=10335 pid=11942 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145735.966:439): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145735.967:440): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145735.975:441): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145735.976:442): pid=11945 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145735.976:443): pid=11945 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.019:444): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.019:445): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.020:446): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.036:447): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11945 suid=1000 rport=52288 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.037:448): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.038:449): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.038:450): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145736.038:451): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145736.038:452): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.038:453): pid=11942 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145736.055:454): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145736.056:455): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11961 suid=74 rport=52290 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145736.056:456): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11961 suid=74 rport=52290 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145736.118:457): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.118:458): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145736.148:459): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.148:460): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11961 suid=74 rport=52290 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145736.149:461): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145736.149:462): pid=11960 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145736.149:462): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd00e829f0 a2=4 a3=3e8 items=0 ppid=10335 pid=11960 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145736.149:462): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145736.150:463): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145736.158:464): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.158:465): pid=11963 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145736.159:466): pid=11963 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.203:467): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.203:468): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.204:469): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.226:470): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145736.226:471): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.226:472): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11963 suid=1000 rport=52290 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.226:473): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.227:474): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.227:475): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.228:476): pid=11960 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145736.243:477): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145736.243:478): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11978 suid=74 rport=52292 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145736.243:479): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11978 suid=74 rport=52292 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145736.305:480): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.305:481): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145736.338:482): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.338:483): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11978 suid=74 rport=52292 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145736.340:484): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145736.340:485): pid=11977 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145736.340:485): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffead59b600 a2=4 a3=3e8 items=0 ppid=10335 pid=11977 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145736.340:485): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145736.341:486): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145736.349:487): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.350:488): pid=11980 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145736.351:489): pid=11980 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.395:490): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.395:491): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.396:492): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.416:493): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145736.416:494): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.416:495): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11980 suid=1000 rport=52292 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.416:496): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.417:497): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.417:498): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.418:499): pid=11977 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145736.431:500): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145736.431:501): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11995 suid=74 rport=52294 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145736.431:502): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11995 suid=74 rport=52294 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145736.493:503): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.493:504): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145736.523:505): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.523:506): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11995 suid=74 rport=52294 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145736.524:507): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145736.525:508): pid=11994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145736.525:508): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff485cdad0 a2=4 a3=3e8 items=0 ppid=10335 pid=11994 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145736.525:508): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145736.525:509): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145736.533:510): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.534:511): pid=11997 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145736.535:512): pid=11997 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.579:513): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.579:514): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.580:515): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.598:516): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11997 suid=1000 rport=52294 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.598:517): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.599:518): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.599:519): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145736.600:520): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145736.600:521): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.600:522): pid=11994 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=11994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145736.614:523): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145736.614:524): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12014 suid=74 rport=52296 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145736.614:525): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12014 suid=74 rport=52296 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145736.676:526): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.676:527): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145736.707:528): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.707:529): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12014 suid=74 rport=52296 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145736.708:530): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145736.708:531): pid=12013 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145736.708:531): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeb3a26da0 a2=4 a3=3e8 items=0 ppid=10335 pid=12013 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145736.708:531): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145736.709:532): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145736.717:533): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.718:534): pid=12016 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145736.719:535): pid=12016 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.763:536): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.763:537): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.764:538): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.781:539): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12016 suid=1000 rport=52296 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.781:540): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12016 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145736.782:541): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.782:542): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145736.783:543): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145736.783:544): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.783:545): pid=12013 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145736.797:546): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145736.798:547): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12031 suid=74 rport=52298 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145736.798:548): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12031 suid=74 rport=52298 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145736.860:549): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.860:550): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145736.890:551): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145736.891:552): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12031 suid=74 rport=52298 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145736.892:553): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145736.892:554): pid=12030 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145736.892:554): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff3d55d980 a2=4 a3=3e8 items=0 ppid=10335 pid=12030 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145736.892:554): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145736.893:555): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145736.900:556): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.901:557): pid=12033 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145736.902:558): pid=12033 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145736.943:559): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145736.943:560): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.944:561): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145736.993:562): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145736.993:563): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63207072696E746620225C6E31302E302E302E323920202020636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D6B38732D6D616E6966657374732D3133342D315C6E22203E3E202F6574632F686F737473 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145736.994:564): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145736.995:565): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145736.997:566): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145736.997:567): pid=12034 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.998:568): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12033 suid=1000 rport=52298 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145736.999:569): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145737.000:570): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145737.000:571): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145737.000:572): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145737.000:573): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145737.000:574): pid=12030 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145738.213:575): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145738.213:576): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12050 suid=74 rport=52306 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145738.213:577): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12050 suid=74 rport=52306 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145738.276:578): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145738.276:579): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145738.305:580): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145738.305:581): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12050 suid=74 rport=52306 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145738.307:582): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145738.307:583): pid=12049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145738.307:583): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffde6aecf50 a2=4 a3=3e8 items=0 ppid=10335 pid=12049 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145738.307:583): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145738.308:584): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145738.316:585): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.316:586): pid=12052 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145738.317:587): pid=12052 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145738.359:588): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145738.359:589): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.360:590): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12053 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.556:591): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12052 suid=1000 rport=52306 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.556:592): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12052 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145738.558:593): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145738.558:594): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145738.558:595): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145738.558:596): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.559:597): pid=12049 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145738.576:598): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145738.579:599): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12068 suid=74 rport=52308 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145738.579:600): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12068 suid=74 rport=52308 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145738.640:601): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145738.640:602): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145738.670:603): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145738.670:604): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12068 suid=74 rport=52308 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145738.672:605): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145738.672:606): pid=12067 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145738.672:606): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffce8312300 a2=4 a3=3e8 items=0 ppid=10335 pid=12067 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145738.672:606): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145738.673:607): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145738.681:608): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.681:609): pid=12070 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145738.682:610): pid=12070 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145738.727:611): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145738.727:612): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145738.728:613): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12071 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145738.822:614): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145738.822:615): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=79756D207265706F6C697374 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145738.822:616): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145738.824:617): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145739.345:618): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145739.345:619): pid=12141 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145739.381:620): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145739.381:621): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=79756D20696E7374616C6C202D79206A712062696E642D7574696C7320676974 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145739.381:622): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145739.383:623): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739145757.305:624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145757.338:625): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145757.338:626): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1739145761.050:627): auid=1000 ses=22 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1739145761.050:627): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7f2f53a00000 a2=3594aa a3=0 items=0 ppid=12203 pid=12208 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145761.050:627): proctitle="/sbin/load_policy"
type=SERVICE_START msg=audit(1739145761.887:628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra7c44fe1b4974c6190d7bd1861b4f577 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145762.047:629): prog-id=36 op=LOAD
type=BPF msg=audit(1739145762.047:630): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.047:631): prog-id=37 op=LOAD
type=BPF msg=audit(1739145762.047:632): prog-id=38 op=LOAD
type=BPF msg=audit(1739145762.047:633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.047:634): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.048:635): prog-id=39 op=LOAD
type=BPF msg=audit(1739145762.048:636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.048:637): prog-id=40 op=LOAD
type=BPF msg=audit(1739145762.048:638): prog-id=41 op=LOAD
type=BPF msg=audit(1739145762.049:639): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.049:640): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.051:641): prog-id=42 op=LOAD
type=BPF msg=audit(1739145762.051:642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.053:643): prog-id=43 op=LOAD
type=BPF msg=audit(1739145762.053:644): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.053:645): prog-id=44 op=LOAD
type=BPF msg=audit(1739145762.053:646): prog-id=45 op=LOAD
type=BPF msg=audit(1739145762.053:647): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145762.053:648): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739145762.084:649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra8ccf0796bab4e00ad96bc4221cae48f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:650): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-license-32:9.16.23-24.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:651): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-libs-32:9.16.23-24.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:652): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-utils-32:9.16.23-24.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:653): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.43.5-1.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:654): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-doc-2.43.5-1.el9_4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:655): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-doc-32:9.16.23-24.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:656): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-bind-32:9.16.23-24.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:657): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-utils-32:9.16.23-24.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:658): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:659): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:660): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:661): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:662): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:663): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:664): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:665): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:666): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:667): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:668): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:669): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:670): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.106:671): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:672): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:673): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:674): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:675): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.92-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:676): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:677): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:678): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:679): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:680): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:681): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:682): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:683): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:684): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-462.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:685): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:686): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:687): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:688): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:689): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:690): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:691): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:692): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:693): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:694): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:695): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:696): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:697): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:698): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:699): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:700): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:701): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:702): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:703): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:704): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:705): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:706): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:707): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:708): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:709): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:710): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:711): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:712): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:713): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.107:714): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:715): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-DynaLoader-0:1.47-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:716): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-TermReadKey-2.38-11.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:717): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Error-1:0.17029-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:718): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Find-0:1.37-481.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:719): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-lib-0:0.65-481.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:720): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="emacs-filesystem-1:27.2-10.el9_4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:721): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Git-2.43.5-1.el9_4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:722): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-2.43.5-1.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:723): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:724): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-17.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145762.108:725): pid=12147 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-32:9.16.23-24.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145762.611:726): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145762.611:727): pid=12145 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145762.679:728): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145762.680:729): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6C6F63616C6563746C207365742D6C6F63616C65204C414E473D656E5F55532E5554462D38 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145762.680:730): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145762.683:731): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145762.692:732): prog-id=46 op=LOAD
type=BPF msg=audit(1739145762.692:733): prog-id=47 op=LOAD
type=BPF msg=audit(1739145762.692:734): prog-id=48 op=LOAD
type=SERVICE_START msg=audit(1739145762.735:735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-localed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145762.749:736): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145762.749:737): pid=14047 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145762.786:738): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145762.787:739): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63206563686F202D6520274C414E473D656E5F55532E7574662D385C6E4C435F414C4C3D656E5F55532E7574662D3827203E3E202F6574632F656E7669726F6E6D656E74 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145762.787:740): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145762.789:741): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145762.791:742): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145762.791:743): pid=14276 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145762.829:744): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145762.829:745): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=79756D20696E7374616C6C202D7920707974686F6E3320707974686F6E332D70697020707974686F6E332D646576656C20676974 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145762.829:746): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145762.830:747): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739145762.899:748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145762.899:749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145762.920:750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra7c44fe1b4974c6190d7bd1861b4f577 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145762.921:751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra8ccf0796bab4e00ad96bc4221cae48f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145766.127:752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rec45522d8bf1408790826ba2bd350f56 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145766.141:753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r51ea36dc672e47108b08d3508526a853 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1739145766.151:754): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libs-3.9.19-8.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:755): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python-unversioned-command-3.9.19-8.el9_5.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:756): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-3.9.19-8.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:757): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pip-21.3.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:758): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-m4-1.7.3-10.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:759): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libpkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:760): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:761): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-pkg-config-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145766.152:762): pid=14285 uid=0 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-devel-3.9.19-8.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="yum" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145767.316:763): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145767.316:764): pid=14283 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145767.351:765): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145767.351:766): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=707974686F6E33202D6D2070697020696E7374616C6C202D2D75706772616465207069703D3D32312E312E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145767.352:767): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145767.354:768): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739145767.432:769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145767.432:770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145767.451:771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rec45522d8bf1408790826ba2bd350f56 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145767.452:772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r51ea36dc672e47108b08d3508526a853 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145768.945:773): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145768.945:774): pid=14989 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145770.094:775): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145770.095:776): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd=7069703320696E7374616C6C202D7220726571756972656D656E74732E747874 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145770.095:777): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145770.096:778): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739145792.780:779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-localed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145792.809:780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145792.809:781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145792.809:782): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739145800.144:783): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.144:784): pid=15007 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.186:785): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145800.187:786): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15032 suid=74 rport=44484 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145800.187:787): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15032 suid=74 rport=44484 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1739145800.334:788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1739145800.368:789): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145800.368:790): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145800.400:791): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145800.400:792): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15032 suid=74 rport=44484 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145800.401:793): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145800.401:794): pid=15031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145800.401:794): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee35683b0 a2=4 a3=3e8 items=0 ppid=10335 pid=15031 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145800.401:794): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145800.402:795): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145800.411:796): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.412:797): pid=15036 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145800.413:798): pid=15036 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145800.454:799): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145800.454:800): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.455:801): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145800.505:802): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145800.505:803): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=746565202F6574632F73797363746C2E642F74662D6875676570616765732E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145800.506:804): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145800.508:805): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145800.509:806): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.510:807): pid=15051 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.511:808): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15036 suid=1000 rport=44484 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.511:809): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145800.512:810): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.512:811): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145800.513:812): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145800.513:813): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.513:814): pid=15031 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739145800.526:815): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145800.527:816): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15056 suid=74 rport=44496 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145800.527:817): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15056 suid=74 rport=44496 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145800.597:818): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145800.597:819): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145800.628:820): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145800.629:821): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15056 suid=74 rport=44496 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145800.630:822): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145800.630:823): pid=15055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145800.630:823): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd606f8f80 a2=4 a3=3e8 items=0 ppid=10335 pid=15055 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145800.630:823): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145800.631:824): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145800.638:825): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.639:826): pid=15058 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145800.640:827): pid=15058 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145800.681:828): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145800.681:829): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.682:830): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145800.731:831): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145800.732:832): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797363746C202D2D73797374656D exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145800.732:833): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145800.734:834): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145800.739:835): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.739:836): pid=15059 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145800.740:837): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145800.740:838): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.740:839): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15058 suid=1000 rport=44496 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.741:840): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145800.742:841): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.742:842): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145800.742:843): pid=15055 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=USER_ACCT msg=audit(1739145800.859:844): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145800.859:845): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd=73797374656D63746C2069732D656E61626C65642073797374656D642D7265736F6C7665642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145800.860:846): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145800.861:847): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145800.868:848): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145800.868:849): pid=15090 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739145800.914:850): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145800.915:851): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd="/home/rocky/src/opensdn-io/tf-devstack/common/create_docker_config.sh" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145800.915:852): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145800.916:853): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145801.169:854): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145801.169:855): pid=15108 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145801.974:856): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739145801.975:857): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15160 suid=74 rport=44498 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739145801.975:858): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15160 suid=74 rport=44498 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739145802.047:859): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145802.047:860): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145802.078:861): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739145802.079:862): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15160 suid=74 rport=44498 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739145802.080:863): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739145802.080:864): pid=15159 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739145802.080:864): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff4ac29560 a2=4 a3=3e8 items=0 ppid=10335 pid=15159 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145802.080:864): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739145802.081:865): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739145802.089:866): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145802.090:867): pid=15165 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739145802.091:868): pid=15165 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739145802.132:869): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145802.132:870): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145802.133:871): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145802.154:872): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145802.154:873): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145802.163:874): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145802.163:875): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145802.164:876): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145802.211:877): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145802.211:878): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145802.222:879): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145802.222:880): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145802.223:881): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145802.272:882): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145802.272:883): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677379726272677467637A6D7463696772756C7666736876696961666E6E6F63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145802.272:884): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145802.274:885): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145802.870:886): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145802.871:887): pid=15210 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145802.873:888): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145802.873:889): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145803.087:890): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145803.087:891): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145803.088:892): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145803.137:893): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145803.137:894): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6176686E686E6D6E7368646B636463626C626D6E686367656E6B7A6D6C7967203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145803.138:895): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145803.139:896): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145803.296:897): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145803.296:898): pid=15262 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145803.298:899): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145803.298:900): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.147:901): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.147:902): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.148:903): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15294 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145806.204:904): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145806.204:905): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A666462696174656F6E6D7A637777687479776F6E736A7A706E6373717A7962203B20636174202F6574632F6F732D72656C65617365 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145806.204:906): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145806.206:907): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145806.209:908): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145806.209:909): pid=15294 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145806.210:910): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145806.210:911): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.314:912): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.314:913): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.314:914): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15315 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145806.333:915): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145806.333:916): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.342:917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.342:918): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.343:919): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145806.366:920): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145806.366:921): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.651:922): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.651:923): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.652:924): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145806.697:925): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145806.697:926): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.708:927): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.708:928): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.709:929): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15364 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145806.732:930): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145806.732:931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145806.746:932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145806.746:933): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145806.747:934): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145806.804:935): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145806.804:936): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145806.804:937): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145806.806:938): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145807.151:939): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145807.152:940): pid=15394 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145807.154:941): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.154:942): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.164:943): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.164:944): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.165:945): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.185:946): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.185:947): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.251:948): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.251:949): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.252:950): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.273:951): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.273:952): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.282:953): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.282:954): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.283:955): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.306:956): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.306:957): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.484:958): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.484:959): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.484:960): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.513:961): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.513:962): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.523:963): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.523:964): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.524:965): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.544:966): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.544:967): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.558:968): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.558:969): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.559:970): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145807.611:971): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145807.611:972): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145807.612:973): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145807.613:974): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145807.772:975): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145807.772:976): pid=15498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145807.774:977): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.774:978): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145807.784:979): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145807.784:980): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145807.785:981): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145807.806:982): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145807.806:983): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.163:984): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.163:985): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.164:986): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.183:987): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.183:988): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.193:989): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.193:990): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.194:991): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.216:992): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.216:993): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.401:994): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.401:995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.402:996): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.431:997): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.431:998): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.441:999): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.441:1000): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.442:1001): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.462:1002): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.462:1003): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.472:1004): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.472:1005): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.473:1006): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145808.524:1007): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145808.524:1008): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145808.524:1009): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145808.526:1010): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145808.673:1011): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145808.674:1012): pid=15614 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145808.676:1013): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.676:1014): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.686:1015): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.686:1016): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.686:1017): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.706:1018): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.706:1019): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.788:1020): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.788:1021): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.789:1022): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.807:1023): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.807:1024): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145808.817:1025): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145808.817:1026): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145808.818:1027): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15651 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145808.840:1028): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145808.840:1029): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145809.052:1030): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145809.052:1031): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145809.053:1032): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15672 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145809.085:1033): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145809.085:1034): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145809.095:1035): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145809.095:1036): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145809.096:1037): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15686 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145809.116:1038): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145809.116:1039): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145809.126:1040): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145809.126:1041): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145809.126:1042): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145809.180:1043): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145809.180:1044): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D727171766D6B71756A6E717077706267686C706F6D76797465686C6379736E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313733393134353830382E383039313438332D31353633352D3136343732313931333239363031302F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145809.180:1045): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145809.181:1046): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145809.867:1047): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145809.867:1048): pid=15716 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145809.870:1049): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145809.870:1050): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145809.880:1051): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145809.880:1052): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145809.881:1053): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145809.900:1054): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145809.900:1055): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.124:1056): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.124:1057): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.125:1058): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.143:1059): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.143:1060): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.156:1061): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.156:1062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.156:1063): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.178:1064): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.178:1065): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.367:1066): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.367:1067): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.367:1068): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.396:1069): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.396:1070): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.406:1071): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.406:1072): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.407:1073): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.426:1074): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.426:1075): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.436:1076): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.436:1077): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.437:1078): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145810.489:1079): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145810.489:1080): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A64616B65786E6376736B6C776B666D666A6D6275707A767668747167746F64203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313733393134353831302E313435313034362D31353735322D3130393930343331393731353531372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145810.489:1081): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145810.490:1082): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145810.645:1083): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145810.645:1084): pid=15833 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145810.648:1085): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.648:1086): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.659:1087): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.659:1088): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.660:1089): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.681:1090): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.681:1091): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.737:1092): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.737:1093): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.738:1094): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.759:1095): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.759:1096): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.771:1097): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.772:1098): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.772:1099): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.796:1100): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.796:1101): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.814:1102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.814:1103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.815:1104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.855:1105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.855:1106): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.865:1107): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.865:1108): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.866:1109): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145810.885:1110): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145810.885:1111): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145810.895:1112): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145810.895:1113): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145810.896:1114): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145810.947:1115): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145810.947:1116): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145810.948:1117): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145810.949:1118): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145811.246:1119): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145811.246:1120): pid=15933 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145811.248:1121): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.249:1122): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.260:1123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.260:1124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.261:1125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145811.283:1126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.283:1127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.352:1128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.352:1129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.352:1130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145811.372:1131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.372:1132): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.382:1133): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.382:1134): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.383:1135): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145811.412:1136): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.412:1137): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.732:1138): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.732:1139): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.733:1140): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145811.771:1141): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.771:1142): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.781:1143): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.781:1144): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.782:1145): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145811.802:1146): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145811.802:1147): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145811.812:1148): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145811.812:1149): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145811.813:1150): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145811.865:1151): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145811.865:1152): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145811.866:1153): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145811.867:1154): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145812.156:1155): prog-id=49 op=LOAD
type=BPF msg=audit(1739145812.156:1156): prog-id=50 op=LOAD
type=SERVICE_START msg=audit(1739145812.200:1157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145812.231:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145812.254:1159): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145812.255:1160): pid=16037 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145812.257:1161): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.257:1162): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.268:1163): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.268:1164): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.269:1165): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.289:1166): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.289:1167): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.432:1168): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.432:1169): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.433:1170): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16081 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.451:1171): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.451:1172): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.461:1173): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.461:1174): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.462:1175): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.483:1176): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.483:1177): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.497:1178): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.498:1179): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.498:1180): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16116 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.527:1181): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.527:1182): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.537:1183): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.537:1184): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.538:1185): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16130 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.557:1186): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.557:1187): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.567:1188): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.567:1189): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.568:1190): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145812.620:1191): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145812.621:1192): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145812.621:1193): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145812.623:1194): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145812.779:1195): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145812.779:1196): pid=16160 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145812.782:1197): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.782:1198): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.793:1199): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.793:1200): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.794:1201): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145812.816:1202): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145812.816:1203): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145812.899:1204): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145812.899:1205): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145812.900:1206): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145812.950:1207): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145812.950:1208): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75716F6D776E6262727862716461616F76646F68636C62777168796D69726470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145812.951:1209): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145812.952:1210): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145813.268:1211): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145813.268:1212): pid=16195 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145813.270:1213): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145813.270:1214): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145813.309:1215): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145813.310:1216): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145813.310:1217): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16205 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145813.361:1218): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145813.361:1219): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726667666A7A6A62726B6C6A6B756E7061696366687A726F6A747066677570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145813.361:1220): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145813.362:1221): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145813.783:1222): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145813.784:1223): pid=16218 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145813.786:1224): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145813.786:1225): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145813.827:1226): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145813.827:1227): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145813.827:1228): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145813.877:1229): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145813.878:1230): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777863646E6E73716E7964616777766F6570796C75646377746D616E64617673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145813.878:1231): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145813.879:1232): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145814.431:1233): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145814.431:1234): pid=16252 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145814.434:1235): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145814.434:1236): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145815.224:1237): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145815.224:1238): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145815.225:1239): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145815.275:1240): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145815.276:1241): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656663736168787063696A65776E776E78766C736E6964756C64657575686375203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145815.276:1242): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145815.277:1243): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=ADD_GROUP msg=audit(1739145815.444:1244): pid=16302 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="kube-cert"
type=GRP_MGMT msg=audit(1739145815.449:1245): pid=16302 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="kube-cert"
type=USER_END msg=audit(1739145815.485:1246): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145815.485:1247): pid=16299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145815.487:1248): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145815.487:1249): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145815.765:1250): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145815.765:1251): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145815.766:1252): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145815.817:1253): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145815.817:1254): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A76626164657761627A6374736E656162676D786F667A747371646368667561203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145815.818:1255): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145815.819:1256): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=ADD_USER msg=audit(1739145816.016:1257): pid=16328 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="kube" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145816.066:1258): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145816.067:1259): pid=16324 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.069:1260): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145816.069:1261): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145816.145:1262): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145816.145:1263): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145816.146:1264): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145816.197:1265): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145816.197:1266): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68746F7862666D6B6567647962776A7973746C6A7A7279676F6F676F6D6E7562203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145816.198:1267): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145816.199:1268): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.342:1269): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145816.342:1270): pid=16351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.344:1271): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145816.344:1272): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145816.506:1273): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145816.506:1274): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145816.507:1275): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145816.556:1276): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145816.557:1277): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6365796270636C6D676C7875756F7678717A756A6A6D637A6B7262657A67203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145816.557:1278): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145816.558:1279): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.710:1280): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145816.711:1281): pid=16370 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.713:1282): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145816.713:1283): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145816.745:1284): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145816.745:1285): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145816.745:1286): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16375 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145816.796:1287): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145816.796:1288): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61636174656D6D74636C6270776D6C756C64777171706F7369617371756A7773203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145816.797:1289): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145816.798:1290): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.949:1291): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145816.949:1292): pid=16388 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145816.952:1293): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145816.952:1294): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145817.299:1295): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145817.300:1296): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145817.300:1297): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145817.350:1298): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145817.350:1299): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626876746A73666F6D616C74626C65736D6177696A62667A6B72626179796B66203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145817.351:1300): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145817.352:1301): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145817.781:1302): prog-id=51 op=LOAD
type=BPF msg=audit(1739145817.781:1303): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.781:1304): prog-id=52 op=LOAD
type=BPF msg=audit(1739145817.781:1305): prog-id=53 op=LOAD
type=BPF msg=audit(1739145817.781:1306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.781:1307): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.782:1308): prog-id=54 op=LOAD
type=BPF msg=audit(1739145817.782:1309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.783:1310): prog-id=55 op=LOAD
type=BPF msg=audit(1739145817.783:1311): prog-id=56 op=LOAD
type=BPF msg=audit(1739145817.783:1312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.783:1313): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.783:1314): prog-id=57 op=LOAD
type=BPF msg=audit(1739145817.783:1315): prog-id=58 op=LOAD
type=BPF msg=audit(1739145817.783:1316): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.783:1317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.785:1318): prog-id=59 op=LOAD
type=BPF msg=audit(1739145817.785:1319): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.787:1320): prog-id=60 op=LOAD
type=BPF msg=audit(1739145817.787:1321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.787:1322): prog-id=61 op=LOAD
type=BPF msg=audit(1739145817.787:1323): prog-id=62 op=LOAD
type=BPF msg=audit(1739145817.787:1324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145817.787:1325): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739145817.808:1326): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145817.808:1327): pid=16406 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145817.811:1328): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145817.811:1329): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145817.967:1330): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145817.967:1331): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145817.967:1332): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145818.019:1333): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145818.019:1334): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B706E797174767763646679786D6D76686373687265727471627064777A73203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145818.020:1335): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145818.022:1336): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.178:1337): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145818.178:1338): pid=16457 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.180:1339): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145818.180:1340): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145818.312:1341): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145818.312:1342): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145818.313:1343): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145818.362:1344): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145818.362:1345): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6C7563776A7A6C6C66756C6A6D76666967707870766777767163767A616E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145818.363:1346): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145818.364:1347): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.524:1348): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145818.524:1349): pid=16483 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.526:1350): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145818.526:1351): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145818.767:1352): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145818.767:1353): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145818.768:1354): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145818.819:1355): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145818.820:1356): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616864777774726E697378626C627269616F7A6A69617A716E6E786D6F6F65203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145818.820:1357): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145818.821:1358): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.978:1359): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145818.978:1360): pid=16502 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145818.981:1361): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145818.981:1362): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145819.092:1363): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145819.092:1364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145819.093:1365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145819.142:1366): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145819.143:1367): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657275706A646D727066756E6C696D6F6D666E646976787872766B796B707A6A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145819.143:1368): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145819.144:1369): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.298:1370): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145819.298:1371): pid=16523 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.299:1372): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145819.299:1373): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145819.358:1374): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145819.358:1375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145819.359:1376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16530 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145819.409:1377): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145819.409:1378): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D77686C627071796E6D7072696976766F6B646862697878646961767A6866203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145819.410:1379): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145819.411:1380): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.560:1381): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145819.560:1382): pid=16543 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.563:1383): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145819.563:1384): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145819.627:1385): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145819.627:1386): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145819.628:1387): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145819.678:1388): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145819.678:1389): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61786F6861656E6E7770796174706B716E616A6A6273636F786263757578636C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145819.679:1390): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145819.680:1391): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.838:1392): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145819.839:1393): pid=16562 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145819.841:1394): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145819.841:1395): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145820.071:1396): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145820.071:1397): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145820.072:1398): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145820.122:1399): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145820.122:1400): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63746A716E76706673727978617461667767736A696B646E726C65706F79746F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145820.123:1401): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145820.124:1402): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.271:1403): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145820.271:1404): pid=16581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.274:1405): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145820.274:1406): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145820.467:1407): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145820.467:1408): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145820.468:1409): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145820.519:1410): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145820.519:1411): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C7878777974796F63656B786563766872627A6A637A6A74636C6F726D636C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145820.519:1412): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145820.521:1413): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.690:1414): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145820.691:1415): pid=16604 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.693:1416): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145820.693:1417): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145820.754:1418): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145820.754:1419): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145820.755:1420): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145820.809:1421): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145820.809:1422): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7871756476686176767877627167696474796D74716367787A74706E71666573203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145820.810:1423): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145820.811:1424): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.972:1425): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145820.972:1426): pid=16624 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145820.974:1427): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145820.974:1428): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145821.150:1429): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145821.150:1430): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145821.151:1431): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145821.203:1432): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145821.203:1433): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B647A787A637873666C697376746C67656E6F6E626671766E7965697A6D77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145821.203:1434): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145821.205:1435): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145821.371:1436): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145821.371:1437): pid=16648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145821.374:1438): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145821.374:1439): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145821.568:1440): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145821.568:1441): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145821.569:1442): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145821.620:1443): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145821.620:1444): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A616379656F687A766E6F6E756C7367696B6B74656C757A7762636C73626E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145821.620:1445): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145821.622:1446): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145821.770:1447): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145821.770:1448): pid=16673 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145821.772:1449): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145821.772:1450): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145821.862:1451): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145821.862:1452): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145821.863:1453): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145821.912:1454): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145821.913:1455): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B746A7178657872786B74736E6676646E6A706F677776767174767A646161203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145821.913:1456): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145821.914:1457): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145822.062:1458): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145822.062:1459): pid=16694 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145822.064:1460): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145822.064:1461): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1739145822.242:1462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145822.537:1463): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145822.537:1464): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145822.538:1465): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145822.587:1466): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145822.587:1467): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A75686B676278656D706F67766C73756767736E6D686E77726C627263716B77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145822.588:1468): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145822.589:1469): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145822.736:1470): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145822.736:1471): pid=16731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145822.738:1472): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145822.738:1473): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145823.570:1474): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145823.570:1475): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145823.571:1476): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145823.621:1477): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145823.621:1478): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6473617568667678627477626A726F70646F75767A75646171686C6D7A737871203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145823.621:1479): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145823.622:1480): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145824.314:1481): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145824.314:1482): pid=16776 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145824.317:1483): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145824.317:1484): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145824.385:1485): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145824.385:1486): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145824.386:1487): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16783 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145824.436:1488): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145824.436:1489): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E767062626C627665637569796D636D637071726B796171796C6673717477203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145824.436:1490): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145824.438:1491): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145824.595:1492): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145824.595:1493): pid=16796 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145824.598:1494): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145824.598:1495): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145825.808:1496): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145825.808:1497): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145825.809:1498): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145825.859:1499): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145825.859:1500): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E77626C74616562696C636D7865656F6F666C797A63796C68626D686A776B6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145825.859:1501): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145825.861:1502): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.019:1503): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145826.019:1504): pid=16868 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.021:1505): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145826.021:1506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145826.049:1507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145826.050:1508): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145826.050:1509): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16873 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145826.102:1510): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145826.102:1511): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B64657076776469666E666C66706578616F6A646B717A7364686A7678697164203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145826.102:1512): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145826.104:1513): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.300:1514): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145826.300:1515): pid=16886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.302:1516): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145826.303:1517): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145826.331:1518): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145826.331:1519): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145826.332:1520): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145826.384:1521): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145826.384:1522): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73716162616B6E6D787073636762627A6F7377637077696C6C67696379716C75203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145826.384:1523): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145826.386:1524): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.546:1525): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145826.547:1526): pid=16903 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.549:1527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145826.549:1528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145826.576:1529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145826.576:1530): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145826.577:1531): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145826.628:1532): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145826.628:1533): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F626C6C77756877737362686A687A7067747475616566756E77797A7162626A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145826.628:1534): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145826.630:1535): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.791:1536): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145826.791:1537): pid=16920 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145826.794:1538): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145826.794:1539): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145826.863:1540): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145826.863:1541): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145826.864:1542): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16925 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145826.913:1543): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145826.913:1544): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6677716B6A7A656A7A7472727A77796F6D64716D69667A74626C71706C616477203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145826.913:1545): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145826.915:1546): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.073:1547): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145827.073:1548): pid=16938 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.075:1549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145827.075:1550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145827.103:1551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145827.103:1552): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145827.104:1553): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145827.154:1554): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145827.154:1555): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636B7678646B746A646A68616D61746F68736E7276656473696361756D7274203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145827.155:1556): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145827.156:1557): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.331:1558): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145827.332:1559): pid=16956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.334:1560): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145827.334:1561): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145827.490:1562): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145827.490:1563): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145827.490:1564): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145827.541:1565): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145827.541:1566): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66657466676365616B736465696D6F6A6C68676677786B7A706E6F726E6C796C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145827.542:1567): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145827.543:1568): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.711:1569): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145827.711:1570): pid=16974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145827.713:1571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145827.713:1572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145827.787:1573): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145827.787:1574): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145827.788:1575): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=16980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145827.841:1576): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145827.842:1577): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777468626D6D646276696A61677166776F6E77656B76766265756A617A7A726A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145827.842:1578): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145827.843:1579): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145828.020:1580): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145828.020:1581): pid=16993 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145828.022:1582): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145828.022:1583): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145828.463:1584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145828.463:1585): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145828.464:1586): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145828.513:1587): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145828.514:1588): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B747177777666696F716F726A6675636D716E6E7274677163677A78717067203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145828.514:1589): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145828.516:1590): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145828.672:1591): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145828.672:1592): pid=17034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145828.674:1593): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145828.674:1594): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145828.769:1595): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145828.769:1596): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145828.770:1597): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145828.788:1598): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145828.788:1599): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145828.801:1600): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145828.801:1601): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145828.802:1602): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145828.825:1603): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145828.826:1604): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145828.838:1605): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145828.838:1606): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145828.839:1607): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145828.889:1608): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145828.889:1609): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70636366617779717A686D66787978776F726168736F706C626D656F71646C72203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145828.889:1610): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145828.891:1611): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.046:1612): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145829.046:1613): pid=17089 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.048:1614): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.048:1615): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145829.062:1616): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145829.062:1617): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145829.062:1618): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17094 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145829.084:1619): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.084:1620): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145829.095:1621): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145829.095:1622): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145829.096:1623): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17108 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145829.117:1624): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.117:1625): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145829.240:1626): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145829.240:1627): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145829.241:1628): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145829.291:1629): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145829.292:1630): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6C73787370716B796B74737066736B6D7365766C616C767367617A6B7271203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145829.292:1631): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145829.293:1632): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.455:1633): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145829.455:1634): pid=17136 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.457:1635): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.457:1636): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145829.468:1637): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145829.468:1638): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145829.468:1639): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145829.488:1640): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.488:1641): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145829.760:1642): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145829.760:1643): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145829.761:1644): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145829.813:1645): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145829.813:1646): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A62757964737A68706C767061736D656F71766479726170696B676C687671203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145829.813:1647): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145829.814:1648): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.973:1649): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145829.973:1650): pid=17186 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145829.975:1651): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145829.975:1652): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145830.166:1653): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145830.166:1654): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145830.167:1655): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=17198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145830.217:1656): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145830.217:1657): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D627474626C6D79637065687874756F6E6C696D656C73646E6263746D706A68203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145830.218:1658): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145830.219:1659): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=MAC_CONFIG_CHANGE msg=audit(1739145832.002:1660): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=25AUID="rocky"
type=SYSCALL msg=audit(1739145832.002:1660): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffcb0c3652e a2=2 a3=0 items=0 ppid=17242 pid=17243 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145832.002:1660): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1739145840.925:1661): auid=1000 ses=25 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1739145840.925:1661): arch=c000003e syscall=1 success=yes exit=3537681 a0=4 a1=7f092f400000 a2=35fb11 a3=0 items=0 ppid=17242 pid=17256 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145840.925:1661): proctitle="/usr/sbin/load_policy"
type=SERVICE_STOP msg=audit(1739145842.262:1662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145842.291:1663): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145842.291:1664): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739145870.040:1665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ree243469b021416a835b14cf01701032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145870.195:1666): prog-id=63 op=LOAD
type=BPF msg=audit(1739145870.195:1667): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.196:1668): prog-id=64 op=LOAD
type=BPF msg=audit(1739145870.196:1669): prog-id=65 op=LOAD
type=BPF msg=audit(1739145870.196:1670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.196:1671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.196:1672): prog-id=66 op=LOAD
type=BPF msg=audit(1739145870.196:1673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.197:1674): prog-id=67 op=LOAD
type=BPF msg=audit(1739145870.197:1675): prog-id=68 op=LOAD
type=BPF msg=audit(1739145870.197:1676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.197:1677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.200:1678): prog-id=69 op=LOAD
type=BPF msg=audit(1739145870.200:1679): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.201:1680): prog-id=70 op=LOAD
type=BPF msg=audit(1739145870.201:1681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.201:1682): prog-id=71 op=LOAD
type=BPF msg=audit(1739145870.201:1683): prog-id=72 op=LOAD
type=BPF msg=audit(1739145870.201:1684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145870.201:1685): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739145870.229:1686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra4484f72ca7b4ebaa532ddd854e885e8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1687): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-libs-1.8.10-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1688): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_queue-1.0.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1689): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cttimeout-1.0.0-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1690): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cthelper-1.0.0-22.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1691): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.6-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1692): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipset-libs-7.11-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1693): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipset-7.11-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1694): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.10-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1695): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conntrack-tools-1.4.7-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1696): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="socat-1.7.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1697): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipvsadm-1.31-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1698): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.232.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1699): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unzip-6.0-57.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145870.236:1700): pid=17213 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bash-completion-1:2.11-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739145870.423:1701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145870.423:1702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145870.439:1703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ree243469b021416a835b14cf01701032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145870.440:1704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra4484f72ca7b4ebaa532ddd854e885e8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145870.671:1705): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145870.671:1706): pid=17211 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145870.674:1707): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145870.674:1708): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145870.766:1709): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145870.766:1710): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145870.767:1711): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145870.817:1712): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145870.817:1713): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74727A7579616963747769766F6B63796B7A706A69667A647377616F6D6C6E69203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145870.818:1714): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145870.821:1715): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145870.964:1716): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145870.964:1717): pid=18299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145870.966:1718): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145870.966:1719): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145871.328:1720): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145871.328:1721): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145871.329:1722): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18305 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145871.379:1723): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145871.379:1724): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71756568686E6D6A6D78626C75686A787379756A70666A6C7565796262647076203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145871.379:1725): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145871.380:1726): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=MAC_STATUS msg=audit(1739145871.637:1727): enforcing=0 old_enforcing=1 auid=1000 ses=25 enabled=1 old-enabled=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1739145871.637:1727): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7fff1f8f45e0 a2=1 a3=0 items=0 ppid=18318 pid=18320 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739145871.637:1727): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1739145871.661:1728): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145871.661:1729): pid=18318 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145871.663:1730): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145871.663:1731): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145871.754:1732): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145871.754:1733): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145871.755:1734): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145871.805:1735): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145871.805:1736): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706776646A72696B65637172737A6E72796B726E6E6176707975777762776473203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145871.806:1737): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145871.807:1738): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145871.959:1739): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145871.959:1740): pid=18339 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145871.961:1741): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145871.962:1742): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145871.988:1743): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145871.988:1744): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145871.989:1745): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145872.040:1746): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145872.040:1747): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776971796F787670686765646873616C68666D6E646879786D68777965637970203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145872.040:1748): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145872.042:1749): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.195:1750): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145872.195:1751): pid=18357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.197:1752): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145872.197:1753): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145872.262:1754): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145872.262:1755): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145872.263:1756): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145872.313:1757): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145872.313:1758): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61696B6A727A6B666F757468686C71707A79727777796C6B6F7A616E7269666C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145872.314:1759): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145872.315:1760): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.464:1761): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145872.464:1762): pid=18375 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.467:1763): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145872.467:1764): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145872.584:1765): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145872.584:1766): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145872.585:1767): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145872.635:1768): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145872.635:1769): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E77747263786576756D68696F6B7875687A64647A736F716F796F78666E6569203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145872.636:1770): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145872.637:1771): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.793:1772): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145872.794:1773): pid=18396 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145872.796:1774): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145872.796:1775): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145873.032:1776): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145873.032:1777): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145873.033:1778): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145873.082:1779): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145873.082:1780): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686270686C75626761687875766E796C687A7A7376767969627872656D6C6977203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145873.083:1781): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145873.084:1782): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.240:1783): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145873.240:1784): pid=18415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.242:1785): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145873.242:1786): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145873.341:1787): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145873.341:1788): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145873.342:1789): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145873.392:1790): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145873.392:1791): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F727264696B73686B7061616175777A767A756F7A737477637669616E6E706D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145873.393:1792): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145873.394:1793): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.537:1794): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145873.538:1795): pid=18438 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.540:1796): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145873.540:1797): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145873.649:1798): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145873.649:1799): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145873.650:1800): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145873.701:1801): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145873.701:1802): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F75626F7265616C6765616168667061627A667164786A6F6474757A76636B70203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145873.702:1803): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145873.703:1804): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.867:1805): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145873.868:1806): pid=18459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145873.870:1807): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145873.870:1808): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145873.900:1809): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145873.900:1810): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145873.900:1811): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145873.950:1812): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145873.950:1813): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7476667669677667616A68737769777264676E6766646D646979736B776E6C6D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145873.950:1814): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145873.951:1815): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.106:1816): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145874.107:1817): pid=18479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.109:1818): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145874.109:1819): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145874.139:1820): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145874.139:1821): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145874.140:1822): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145874.191:1823): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145874.191:1824): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626965717077626B706773706B6A6B65657169756F656969616A687277727479203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145874.191:1825): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145874.193:1826): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.347:1827): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145874.347:1828): pid=18498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.349:1829): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145874.350:1830): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145874.379:1831): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145874.379:1832): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145874.380:1833): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145874.429:1834): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145874.429:1835): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C75616A7479776477677766676F787877706C7A6778776E7A6D656A737978203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145874.430:1836): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145874.431:1837): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.590:1838): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145874.590:1839): pid=18517 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.592:1840): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145874.592:1841): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145874.623:1842): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145874.623:1843): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145874.624:1844): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145874.680:1845): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145874.680:1846): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6461756469766C626A6A6F71696A687A6A72746C6C6C6B686D627170726270203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145874.681:1847): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145874.682:1848): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.841:1849): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145874.841:1850): pid=18536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145874.843:1851): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145874.843:1852): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145874.875:1853): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145874.875:1854): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145874.876:1855): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145874.925:1856): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145874.925:1857): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7872677A78797577616268667663776A67736F6E726377666F6F656966697471203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145874.926:1858): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145874.927:1859): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145875.085:1860): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145875.086:1861): pid=18555 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145875.088:1862): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145875.088:1863): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145875.550:1864): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145875.550:1865): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145875.551:1866): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145875.601:1867): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145875.601:1868): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68666B7A756564676E65787871686769667978777A6967727368707262626C74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145875.602:1869): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145875.603:1870): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145875.894:1871): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145875.895:1872): pid=18579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145875.896:1873): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145875.896:1874): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145876.470:1875): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145876.470:1876): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145876.471:1877): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145876.521:1878): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145876.521:1879): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B6C61697776796D7A716F717A7A7A727A6F727168736F716371616762696E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145876.522:1880): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145876.523:1881): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145876.685:1882): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145876.685:1883): pid=18619 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145876.687:1884): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145876.687:1885): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145876.778:1886): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145876.778:1887): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145876.779:1888): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145876.830:1889): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145876.830:1890): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71766861756E6F767A7967656C6567647A6961637977697A63646B647A777772203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145876.831:1891): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145876.832:1892): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145876.999:1893): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145877.000:1894): pid=18642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145877.002:1895): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145877.002:1896): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145877.267:1897): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145877.267:1898): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145877.268:1899): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18652 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145877.319:1900): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145877.319:1901): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75627961647A727362787078736D6F6A717075777561756B797773706C64666F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145877.319:1902): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145877.320:1903): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145877.487:1904): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145877.488:1905): pid=18665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145877.490:1906): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145877.490:1907): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145877.523:1908): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145877.523:1909): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145877.524:1910): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18672 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145877.577:1911): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145877.577:1912): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697473666D696A74756D61747178646B777771746867777474727276636B6964203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145877.577:1913): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145877.579:1914): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145877.752:1915): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145877.752:1916): pid=18685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145877.754:1917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145877.754:1918): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145877.819:1919): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145877.819:1920): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145877.820:1921): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145877.869:1922): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145877.869:1923): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687661636D6A7A6A63736E687568696F6C776162786D6B676A6A7A7176717767203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145877.870:1924): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145877.871:1925): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145878.153:1926): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145878.153:1927): pid=18705 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145878.155:1928): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145878.155:1929): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145878.439:1930): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145878.439:1931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145878.440:1932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145878.489:1933): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145878.489:1934): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B77747477696C77746C636F6E6D6468797A7A6B7078766D76656E786D6B7864203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145878.489:1935): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145878.490:1936): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739145878.768:1937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145878.788:1938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145878.794:1939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145878.815:1940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145878.821:1941): prog-id=73 op=LOAD
type=BPF msg=audit(1739145878.821:1942): prog-id=74 op=LOAD
type=USER_END msg=audit(1739145878.835:1943): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145878.835:1944): pid=18738 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145878.838:1945): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145878.838:1946): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1739145878.864:1947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145878.906:1948): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145878.906:1949): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145878.907:1950): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=SERVICE_START msg=audit(1739145878.952:1951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739145878.958:1952): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145878.959:1953): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6766686D6D796B6D737764677977666370727764736A667A7573757A6E646F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145878.959:1954): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145878.961:1955): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.110:1956): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145879.110:1957): pid=18797 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.112:1958): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145879.113:1959): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145879.377:1960): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145879.377:1961): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145879.378:1962): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145879.428:1963): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145879.428:1964): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7475666B6B6E636E6E7173716F6364747976766962786E746D717462797A68203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145879.428:1965): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145879.429:1966): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.574:1967): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145879.574:1968): pid=18853 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.576:1969): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145879.576:1970): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145879.691:1971): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145879.691:1972): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145879.692:1973): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145879.742:1974): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145879.742:1975): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A71706D736C6A626D637079616A626461777175757677666567756A63756173203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145879.743:1976): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145879.744:1977): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.902:1978): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145879.902:1979): pid=18874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145879.905:1980): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145879.905:1981): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145880.140:1982): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145880.140:1983): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145880.141:1984): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=18880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145880.194:1985): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145880.194:1986): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6472706D756B796A7872646971796D7A646F7966666C65617368766C69646578203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145880.194:1987): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145880.196:1988): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145881.904:1989): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145881.904:1990): pid=18893 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145881.906:1991): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145881.906:1992): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145882.168:1993): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145882.168:1994): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145882.169:1995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145882.219:1996): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145882.219:1997): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627466766C6E717A6E716E666775746661756B766A7367746E716A726A756B6B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145882.219:1998): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145882.221:1999): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.390:2000): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145882.390:2001): pid=19014 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.393:2002): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145882.393:2003): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145882.461:2004): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145882.461:2005): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145882.462:2006): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19020 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145882.513:2007): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145882.513:2008): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B64616E6A72616A796C6C6C7767616B707979727661786B626D6664656E72203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145882.513:2009): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145882.515:2010): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.674:2011): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145882.674:2012): pid=19033 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.676:2013): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145882.676:2014): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145882.746:2015): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145882.746:2016): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145882.747:2017): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145882.798:2018): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145882.798:2019): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A73647761687367716E7674696D61657562787570716D6F6E6E76666B7A7A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145882.799:2020): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145882.800:2021): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.957:2022): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145882.958:2023): pid=19052 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145882.960:2024): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145882.960:2025): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1739145888.992:2026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145889.630:2027): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145889.630:2028): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145889.631:2029): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145889.686:2030): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145889.686:2031): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72676B6B6F6B69756D797A746E706C767266687168726670696A656C6C716971203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145889.686:2032): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145889.687:2033): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145889.897:2034): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145889.897:2035): pid=19380 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145889.899:2036): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145889.899:2037): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145890.335:2038): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145890.335:2039): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145890.336:2040): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145890.386:2041): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145890.386:2042): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65666E707A667978617A766671687961686E676866746B696B6A686F6E627A69203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145890.387:2043): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145890.388:2044): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145890.538:2045): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145890.538:2046): pid=19415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145890.540:2047): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145890.540:2048): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145890.866:2049): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145890.866:2050): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145890.867:2051): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145890.917:2052): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145890.917:2053): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A706A7961687A616C776761746E66656B757570646F707461726B7665656C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145890.917:2054): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145890.919:2055): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145891.092:2056): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145891.092:2057): pid=19444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145891.094:2058): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145891.094:2059): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145891.212:2060): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145891.212:2061): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145891.213:2062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145891.264:2063): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145891.265:2064): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64786E687772777867787262716A7776797971646777636576646A65747A736B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145891.265:2065): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145891.266:2066): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145891.934:2067): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145891.934:2068): pid=19465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145891.937:2069): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145891.937:2070): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145892.022:2071): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145892.022:2072): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145892.023:2073): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145892.076:2074): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145892.077:2075): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F67657670787261736563787172777265776C7461736D786277766F6B766B67203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145892.077:2076): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145892.078:2077): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145892.784:2078): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145892.784:2079): pid=19485 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145892.786:2080): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145892.787:2081): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145892.994:2082): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145892.994:2083): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145892.995:2084): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145893.017:2085): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.017:2086): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.027:2087): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.027:2088): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.028:2089): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145893.051:2090): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.051:2091): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.072:2092): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.072:2093): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.073:2094): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145893.125:2095): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145893.125:2096): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63786E74626D6E6B7A6A786A76676F696E757A6862737161666265726D656C77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145893.125:2097): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145893.126:2098): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145893.286:2099): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145893.286:2100): pid=19547 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145893.288:2101): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.288:2102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.302:2103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.302:2104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.302:2105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145893.323:2106): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.323:2107): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.333:2108): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.333:2109): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.333:2110): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145893.353:2111): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.353:2112): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.364:2113): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.364:2114): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.365:2115): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19581 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145893.414:2116): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145893.414:2117): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68696B71676A6A666361667077696467686A6464717369776A66707A7168676F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145893.414:2118): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145893.416:2119): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145893.569:2120): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145893.569:2121): pid=19594 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145893.571:2122): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.571:2123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.582:2124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.582:2125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.582:2126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145893.602:2127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145893.602:2128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145893.845:2129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145893.845:2130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145893.846:2131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=19617 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145893.895:2132): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145893.895:2133): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667278696368776663716D70776A78616A736168656A6E65786C75797778666F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145893.895:2134): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145893.897:2135): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=ADD_GROUP msg=audit(1739145901.515:2136): pid=19679 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=GRP_MGMT msg=audit(1739145901.520:2137): pid=19679 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=SERVICE_START msg=audit(1739145903.014:2138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4435a36027bf4b54869a7dd2dcbe35fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145903.184:2139): prog-id=75 op=LOAD
type=BPF msg=audit(1739145903.184:2140): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.184:2141): prog-id=76 op=LOAD
type=BPF msg=audit(1739145903.184:2142): prog-id=77 op=LOAD
type=BPF msg=audit(1739145903.184:2143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.184:2144): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.185:2145): prog-id=78 op=LOAD
type=BPF msg=audit(1739145903.185:2146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.186:2147): prog-id=79 op=LOAD
type=BPF msg=audit(1739145903.187:2148): prog-id=80 op=LOAD
type=BPF msg=audit(1739145903.187:2149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.187:2150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.188:2151): prog-id=81 op=LOAD
type=BPF msg=audit(1739145903.188:2152): prog-id=82 op=LOAD
type=BPF msg=audit(1739145903.188:2153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.188:2154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.191:2155): prog-id=83 op=LOAD
type=BPF msg=audit(1739145903.192:2156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.193:2157): prog-id=84 op=LOAD
type=BPF msg=audit(1739145903.193:2158): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.193:2159): prog-id=85 op=LOAD
type=BPF msg=audit(1739145903.194:2160): prog-id=86 op=LOAD
type=BPF msg=audit(1739145903.194:2161): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145903.194:2162): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2163): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-scan-plugin-0:0.23.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2164): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2165): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-cli-1:20.10.20-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2166): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containerd.io-1.6.16-3.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2167): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2168): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.3.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2169): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2170): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2171): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.14-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2172): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-3:20.10.20-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1739145903.214:2173): pid=19632 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-rootless-extras-0:27.5.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739145903.897:2174): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145903.897:2175): pid=19630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145903.900:2176): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145903.900:2177): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1739145903.907:2178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145903.907:2179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739145903.919:2180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4435a36027bf4b54869a7dd2dcbe35fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145904.261:2181): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145904.261:2182): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145904.262:2183): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145904.316:2184): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145904.316:2185): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70646D68696B63716B6A726E6E6561697664747475736B7A7872797A71646267203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145904.317:2186): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145904.320:2187): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145904.482:2188): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145904.482:2189): pid=20737 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145904.485:2190): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145904.485:2191): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145904.599:2192): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145904.599:2193): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145904.600:2194): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20745 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145904.651:2195): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145904.651:2196): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667461657078666C6A7167726A6265627070637178677370666F66626A75786F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145904.652:2197): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145904.653:2198): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145904.861:2199): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145904.861:2200): pid=20758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145904.864:2201): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145904.864:2202): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145904.939:2203): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145904.939:2204): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145904.940:2205): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145904.961:2206): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145904.961:2207): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145904.971:2208): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145904.971:2209): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145904.972:2210): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20782 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145904.996:2211): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145904.996:2212): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.021:2213): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.021:2214): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.022:2215): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145905.073:2216): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145905.073:2217): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707976766872746A7368656867666965616164757674636369786F6F72676561203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145905.073:2218): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145905.074:2219): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.223:2220): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145905.223:2221): pid=20815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.225:2222): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.225:2223): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.239:2224): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.239:2225): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.240:2226): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.263:2227): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.263:2228): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.274:2229): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.274:2230): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.275:2231): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.295:2232): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.296:2233): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.307:2234): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.307:2235): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.308:2236): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145905.360:2237): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145905.360:2238): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75706C71787A7267766577686B74687567776B726B756B61796B78706E6F776C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145905.360:2239): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145905.362:2240): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.520:2241): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145905.520:2242): pid=20862 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.523:2243): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.523:2244): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.538:2245): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.538:2246): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.539:2247): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.561:2248): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.561:2249): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.631:2250): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.631:2251): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.632:2252): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.653:2253): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.654:2254): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.664:2255): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.664:2256): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.665:2257): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.687:2258): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.687:2259): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.709:2260): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.709:2261): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.709:2262): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145905.760:2263): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145905.760:2264): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7969716B726E75677A676768726E78667A6E697A70756E6A757262776F7170203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145905.761:2265): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145905.762:2266): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.910:2267): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145905.910:2268): pid=20930 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145905.912:2269): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.912:2270): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.927:2271): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.927:2272): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.928:2273): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20935 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.951:2274): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.951:2275): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.961:2276): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.961:2277): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.962:2278): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145905.982:2279): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145905.982:2280): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145905.994:2281): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145905.994:2282): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145905.995:2283): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145906.045:2284): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145906.045:2285): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C786E62756F7A676E737378646E6D686564746E7870616563697978656474203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145906.045:2286): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145906.047:2287): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145906.207:2288): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145906.207:2289): pid=20977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145906.209:2290): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145906.209:2291): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145906.221:2292): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145906.221:2293): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145906.222:2294): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=20981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145906.242:2295): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145906.242:2296): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145906.660:2297): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145906.660:2298): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145906.661:2299): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145906.710:2300): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145906.711:2301): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756A73736378736A646973696361676C696B7273656864747375696A776F7663203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145906.711:2302): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145906.712:2303): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145907.173:2304): prog-id=87 op=LOAD
type=BPF msg=audit(1739145907.173:2305): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.174:2306): prog-id=88 op=LOAD
type=BPF msg=audit(1739145907.174:2307): prog-id=89 op=LOAD
type=BPF msg=audit(1739145907.174:2308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.174:2309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.174:2310): prog-id=90 op=LOAD
type=BPF msg=audit(1739145907.174:2311): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.176:2312): prog-id=91 op=LOAD
type=BPF msg=audit(1739145907.176:2313): prog-id=92 op=LOAD
type=BPF msg=audit(1739145907.176:2314): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.176:2315): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.177:2316): prog-id=93 op=LOAD
type=BPF msg=audit(1739145907.177:2317): prog-id=94 op=LOAD
type=BPF msg=audit(1739145907.177:2318): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.177:2319): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.178:2320): prog-id=95 op=LOAD
type=BPF msg=audit(1739145907.178:2321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.178:2322): prog-id=96 op=LOAD
type=BPF msg=audit(1739145907.178:2323): prog-id=97 op=LOAD
type=BPF msg=audit(1739145907.178:2324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.178:2325): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.179:2326): prog-id=98 op=LOAD
type=BPF msg=audit(1739145907.179:2327): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.183:2328): prog-id=99 op=LOAD
type=BPF msg=audit(1739145907.183:2329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.183:2330): prog-id=100 op=LOAD
type=BPF msg=audit(1739145907.183:2331): prog-id=101 op=LOAD
type=BPF msg=audit(1739145907.183:2332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.183:2333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.184:2334): prog-id=102 op=LOAD
type=BPF msg=audit(1739145907.184:2335): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.186:2336): prog-id=103 op=LOAD
type=BPF msg=audit(1739145907.186:2337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.188:2338): prog-id=104 op=LOAD
type=BPF msg=audit(1739145907.188:2339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.188:2340): prog-id=105 op=LOAD
type=BPF msg=audit(1739145907.188:2341): prog-id=106 op=LOAD
type=BPF msg=audit(1739145907.188:2342): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145907.188:2343): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739145907.273:2344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145907.490:2345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145907.501:2346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145907.525:2347): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145907.525:2348): pid=21025 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145907.528:2349): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145907.528:2350): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1739145908.897:2351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739145908.933:2352): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145908.933:2353): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1739145910.682:2354): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145910.682:2355): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145910.683:2356): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145910.742:2357): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145910.742:2358): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A686969776C62776E637768706867776B756771626C6672756B6C6C6B736775203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145910.743:2359): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145910.745:2360): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145910.902:2361): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145910.902:2362): pid=21148 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145910.904:2363): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145910.904:2364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145912.877:2365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145912.877:2366): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145912.877:2367): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145912.896:2368): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145912.896:2369): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145912.905:2370): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145912.905:2371): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145912.906:2372): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145912.928:2373): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145912.928:2374): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145913.134:2375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145913.134:2376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145913.135:2377): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21192 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145913.183:2378): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145913.184:2379): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63746B6273756B6B686C796C766178676375667279686174687665726B617362203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145913.184:2380): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145913.186:2381): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145914.383:2382): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145914.383:2383): pid=21205 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145914.385:2384): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145914.385:2385): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145914.396:2386): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145914.396:2387): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145914.397:2388): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145914.419:2389): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145914.419:2390): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1739145917.528:2391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739145918.299:2392): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145918.299:2393): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145918.300:2394): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145918.349:2395): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145918.350:2396): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F726A6B6A706661746767747A796371777A686E7268677A6F7A6C616C73636A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145918.350:2397): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145918.351:2398): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145920.175:2399): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145920.175:2400): pid=21241 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145920.178:2401): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145920.178:2402): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145922.496:2403): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145922.496:2404): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145922.496:2405): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145922.515:2406): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145922.515:2407): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145922.525:2408): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145922.525:2409): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145922.526:2410): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145922.549:2411): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145922.549:2412): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145922.560:2413): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145922.560:2414): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145922.561:2415): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21289 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145922.610:2416): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145922.610:2417): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67626D7778797779736C7575616F766B76787165736C78716B7663656E6F706F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145922.610:2418): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145922.612:2419): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145922.765:2420): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145922.765:2421): pid=21302 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145922.767:2422): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145922.767:2423): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145922.977:2424): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145922.977:2425): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145922.977:2426): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145923.027:2427): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145923.027:2428): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62626A62626D776D786E626377686B6E767371707A68636574646163637364203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145923.027:2429): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145923.029:2430): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145924.637:2431): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145924.637:2432): pid=21321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145924.639:2433): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145924.639:2434): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145924.650:2435): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145924.650:2436): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145924.651:2437): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145924.671:2438): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145924.671:2439): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145924.738:2440): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145924.738:2441): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145924.739:2442): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145924.757:2443): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145924.757:2444): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145924.768:2445): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145924.768:2446): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145924.768:2447): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21368 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145924.790:2448): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145924.790:2449): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145924.813:2450): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145924.813:2451): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145924.814:2452): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145924.863:2453): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145924.863:2454): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D77696E6B7962706E75766A61756A646E6F7076756C736C6663716566627A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145924.864:2455): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145924.865:2456): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.009:2457): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145925.009:2458): pid=21401 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.011:2459): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.011:2460): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.024:2461): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.025:2462): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.025:2463): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.046:2464): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.047:2465): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.057:2466): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.057:2467): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.058:2468): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21420 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.077:2469): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.077:2470): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.089:2471): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.089:2472): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.089:2473): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145925.138:2474): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145925.138:2475): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696F6E73796C62696A65787771737567746E6C77706F6F7474647271617873203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145925.139:2476): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145925.140:2477): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.294:2478): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145925.294:2479): pid=21448 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.296:2480): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.296:2481): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.307:2482): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.307:2483): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.308:2484): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.328:2485): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.328:2486): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.403:2487): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.403:2488): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.404:2489): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.422:2490): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.422:2491): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.434:2492): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.434:2493): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.435:2494): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.457:2495): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.457:2496): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.468:2497): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.468:2498): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.469:2499): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21503 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145925.518:2500): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145925.518:2501): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70656E767974776C627977796B6F6B656C68786D6D6B717377657473797A7A67203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145925.519:2502): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145925.520:2503): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.906:2504): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145925.906:2505): pid=21516 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145925.908:2506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.908:2507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145925.919:2508): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145925.919:2509): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145925.920:2510): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145925.939:2511): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145925.939:2512): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145929.096:2513): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145929.096:2514): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145929.097:2515): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145929.146:2516): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145929.146:2517): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717274767665727A6D706F6E796F776C776F6E667978716F7066787771656B78203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145929.147:2518): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145929.148:2519): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145929.306:2520): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145929.306:2521): pid=21558 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145929.308:2522): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145929.308:2523): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145931.290:2524): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145931.290:2525): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145931.291:2526): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145931.309:2527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145931.309:2528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145931.320:2529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145931.320:2530): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145931.320:2531): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21582 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145931.343:2532): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145931.343:2533): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145931.355:2534): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145931.355:2535): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145931.355:2536): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21602 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145931.405:2537): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145931.405:2538): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67646270627A726775706D716F6D6B71726266627367727665676D646C627569203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145931.406:2539): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145931.407:2540): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145932.720:2541): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145932.720:2542): pid=21615 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145932.722:2543): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145932.722:2544): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145932.733:2545): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145932.733:2546): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145932.733:2547): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145932.753:2548): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145932.753:2549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145936.397:2550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145936.397:2551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145936.398:2552): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145936.449:2553): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145936.449:2554): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72776178737865776F62646175756D6B6E6C6D6B78796771786E657075717979203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145936.451:2555): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145936.451:2556): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145938.162:2557): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145938.162:2558): pid=21651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145938.164:2559): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145938.164:2560): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145940.529:2561): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145940.530:2562): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145940.530:2563): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145940.552:2564): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145940.552:2565): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145940.565:2566): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145940.565:2567): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145940.566:2568): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145940.588:2569): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145940.588:2570): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145940.599:2571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145940.599:2572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145940.600:2573): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145940.648:2574): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145940.649:2575): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62627A6D62667A736B7169796E6B637A76616B636F65627A6B776A6467736277203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145940.649:2576): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145940.650:2577): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145940.806:2578): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145940.807:2579): pid=21712 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145940.809:2580): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145940.809:2581): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145940.821:2582): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145940.821:2583): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145940.822:2584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145940.871:2585): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145940.871:2586): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D726F676876717475777065696165797372746B687874677569796F636A6574203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145940.871:2587): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145940.873:2588): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145942.189:2589): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145942.189:2590): pid=21731 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145942.192:2591): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.192:2592): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.202:2593): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.202:2594): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.203:2595): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.225:2596): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.226:2597): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.291:2598): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.291:2599): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.292:2600): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21764 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.310:2601): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.310:2602): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.319:2603): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.319:2604): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.320:2605): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.341:2606): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.341:2607): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.353:2608): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.353:2609): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.354:2610): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145942.403:2611): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145942.403:2612): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C6A6D63797372626F79777871686C77756A6D6F6774757A747A6766697378203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145942.403:2613): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145942.405:2614): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145942.796:2615): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145942.796:2616): pid=21811 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145942.798:2617): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.798:2618): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.809:2619): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.809:2620): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.810:2621): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.832:2622): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.832:2623): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.908:2624): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.908:2625): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.909:2626): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.927:2627): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.927:2628): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.937:2629): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.937:2630): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.937:2631): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145942.959:2632): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145942.959:2633): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145942.982:2634): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145942.982:2635): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145942.983:2636): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145943.032:2637): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145943.033:2638): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764646B6176776961687265736D686975776778656870617172756469686B63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145943.033:2639): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145943.034:2640): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.186:2641): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145943.186:2642): pid=21879 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.188:2643): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.188:2644): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.204:2645): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.204:2646): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.204:2647): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.226:2648): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.226:2649): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.236:2650): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.236:2651): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.237:2652): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.259:2653): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.259:2654): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.271:2655): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.271:2656): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.271:2657): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145943.322:2658): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145943.322:2659): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6777666865766B786F7579747A66757168636275796A68656462726B74677676203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145943.322:2660): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145943.323:2661): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.488:2662): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145943.488:2663): pid=21926 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.491:2664): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.491:2665): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.506:2666): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.506:2667): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.506:2668): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.527:2669): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.527:2670): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.562:2671): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.562:2672): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.563:2673): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.582:2674): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.582:2675): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.593:2676): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.593:2677): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.593:2678): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.617:2679): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.617:2680): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.638:2681): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.638:2682): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.639:2683): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145943.690:2684): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145943.691:2685): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63797A6263766B6A666A6368776B6E68726679656B696567706F64787270696E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145943.691:2686): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145943.692:2687): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.836:2688): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145943.836:2689): pid=21994 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145943.838:2690): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.839:2691): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.854:2692): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.854:2693): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.855:2694): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=21999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.877:2695): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.877:2696): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.889:2697): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.889:2698): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.889:2699): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145943.909:2700): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145943.909:2701): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145943.922:2702): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145943.922:2703): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145943.923:2704): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145943.973:2705): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145943.973:2706): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7476617677646B736B657777746E787A736F6C6F616B696C63687A656977706C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145943.973:2707): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145943.974:2708): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145944.142:2709): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145944.142:2710): pid=22041 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145944.145:2711): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145944.145:2712): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145944.156:2713): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145944.156:2714): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145944.157:2715): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145944.178:2716): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145944.178:2717): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145944.280:2718): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145944.280:2719): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145944.281:2720): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22062 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145944.335:2721): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145944.335:2722): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73697862796D7679726D7376746D6273666B6B76616C6F6C64786D6C657A6778203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145944.335:2723): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145944.336:2724): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145944.756:2725): prog-id=107 op=LOAD
type=BPF msg=audit(1739145944.756:2726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.756:2727): prog-id=108 op=LOAD
type=BPF msg=audit(1739145944.756:2728): prog-id=109 op=LOAD
type=BPF msg=audit(1739145944.756:2729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.756:2730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.757:2731): prog-id=110 op=LOAD
type=BPF msg=audit(1739145944.757:2732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.758:2733): prog-id=111 op=LOAD
type=BPF msg=audit(1739145944.758:2734): prog-id=112 op=LOAD
type=BPF msg=audit(1739145944.758:2735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.758:2736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.762:2737): prog-id=113 op=LOAD
type=BPF msg=audit(1739145944.762:2738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.763:2739): prog-id=114 op=LOAD
type=BPF msg=audit(1739145944.763:2740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.763:2741): prog-id=115 op=LOAD
type=BPF msg=audit(1739145944.763:2742): prog-id=116 op=LOAD
type=BPF msg=audit(1739145944.763:2743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145944.763:2744): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739145944.816:2745): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145944.816:2746): pid=22075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145944.819:2747): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145944.819:2748): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145944.911:2749): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145944.911:2750): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145944.912:2751): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145944.966:2752): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145944.966:2753): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E776A6D71677574656B747978667871776167706779716D756375796A736D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145944.966:2754): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145944.969:2755): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739145945.254:2756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739145945.631:2757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145945.651:2758): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145945.652:2759): pid=22126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145945.654:2760): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145945.654:2761): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145945.733:2762): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145945.733:2763): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145945.734:2764): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145945.785:2765): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145945.785:2766): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6670737A6B7079656A6D6D62747663716C7979756B6E6B716B636F71736D6776203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145945.785:2767): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145945.787:2768): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145946.112:2769): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145946.112:2770): pid=22176 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145946.114:2771): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145946.114:2772): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145946.189:2773): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145946.189:2774): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145946.190:2775): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145946.242:2776): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145946.242:2777): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68756E737666746E6564767A717461646773716C766E616976767A746D69696D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145946.242:2778): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145946.243:2779): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739145946.582:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cri-dockerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739145946.604:2781): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145946.604:2782): pid=22198 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145946.606:2783): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145946.607:2784): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145946.692:2785): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145946.692:2786): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145946.693:2787): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145946.745:2788): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145946.745:2789): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A70707578627869646F637676726A766C7A7166716E6F6869626E7669746D6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145946.746:2790): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145946.748:2791): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739145947.195:2792): prog-id=117 op=LOAD
type=BPF msg=audit(1739145947.195:2793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.195:2794): prog-id=118 op=LOAD
type=BPF msg=audit(1739145947.195:2795): prog-id=119 op=LOAD
type=BPF msg=audit(1739145947.195:2796): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.195:2797): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.196:2798): prog-id=120 op=LOAD
type=BPF msg=audit(1739145947.196:2799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.197:2800): prog-id=121 op=LOAD
type=BPF msg=audit(1739145947.197:2801): prog-id=122 op=LOAD
type=BPF msg=audit(1739145947.197:2802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.197:2803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.201:2804): prog-id=123 op=LOAD
type=BPF msg=audit(1739145947.201:2805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.202:2806): prog-id=124 op=LOAD
type=BPF msg=audit(1739145947.202:2807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.202:2808): prog-id=125 op=LOAD
type=BPF msg=audit(1739145947.202:2809): prog-id=126 op=LOAD
type=BPF msg=audit(1739145947.202:2810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739145947.202:2811): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739145947.225:2812): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145947.226:2813): pid=22251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145947.228:2814): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145947.228:2815): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145947.619:2816): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145947.619:2817): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145947.619:2818): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145947.669:2819): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145947.669:2820): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70726A636E6F71667764716D696B70766F6962786374797862686A7061776D63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145947.670:2821): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145947.672:2822): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145947.840:2823): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145947.840:2824): pid=22316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145947.842:2825): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145947.842:2826): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145947.915:2827): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145947.915:2828): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145947.916:2829): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145947.966:2830): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145947.967:2831): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67666E61797863776F766D7A716A72676D6D65786E7A6B6C61706D726474736C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145947.967:2832): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145947.968:2833): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145948.136:2834): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145948.136:2835): pid=22345 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145948.138:2836): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145948.138:2837): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145952.227:2838): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145952.227:2839): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145952.228:2840): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145952.280:2841): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145952.280:2842): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6778696E636F6D66706D7073686A636467787368717A7A74746B6E66756C6868203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145952.280:2843): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145952.281:2844): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145952.438:2845): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145952.439:2846): pid=22378 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145952.441:2847): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145952.441:2848): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145954.316:2849): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145954.316:2850): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145954.316:2851): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145954.335:2852): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145954.335:2853): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145954.344:2854): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145954.344:2855): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145954.345:2856): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145954.366:2857): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145954.366:2858): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145954.378:2859): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145954.378:2860): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145954.379:2861): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145954.428:2862): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145954.428:2863): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F69716174697773746762657868746B6E61767A6E79626A676477686C6B6C6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145954.428:2864): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145954.429:2865): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145955.487:2866): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145955.487:2867): pid=22435 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145955.489:2868): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145955.489:2869): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145955.501:2870): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145955.501:2871): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145955.501:2872): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145955.521:2873): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145955.521:2874): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145959.200:2875): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145959.200:2876): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145959.201:2877): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145959.250:2878): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145959.250:2879): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777969757065746B636F746B666C696C71756D757766696E65626D657578706D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145959.251:2880): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145959.252:2881): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145961.620:2882): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145961.620:2883): pid=22471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145961.622:2884): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145961.622:2885): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.231:2886): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.231:2887): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.232:2888): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145962.255:2889): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.255:2890): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.269:2891): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.269:2892): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.270:2893): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145962.293:2894): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.293:2895): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.352:2896): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.352:2897): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.353:2898): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145962.403:2899): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145962.403:2900): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B786E65746C747965756F706564616C6370736874636B6C6F796F7A6B7475203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145962.404:2901): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145962.405:2902): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145962.554:2903): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145962.555:2904): pid=22534 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145962.557:2905): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.557:2906): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.571:2907): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.572:2908): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.572:2909): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145962.594:2910): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.594:2911): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.604:2912): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.604:2913): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.605:2914): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22553 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145962.626:2915): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.626:2916): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.638:2917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.638:2918): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.639:2919): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145962.690:2920): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145962.690:2921): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66707079766C666C616B72716A796D616B7A7A6966736D6A6371726F666A6B74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145962.690:2922): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145962.692:2923): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145962.864:2924): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145962.864:2925): pid=22581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145962.866:2926): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.866:2927): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145962.878:2928): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145962.878:2929): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145962.879:2930): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145962.899:2931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145962.899:2932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145963.304:2933): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145963.304:2934): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145963.304:2935): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22602 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145963.323:2936): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145963.323:2937): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145963.332:2938): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145963.332:2939): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145963.333:2940): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145963.356:2941): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145963.356:2942): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145963.368:2943): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145963.368:2944): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145963.369:2945): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145963.418:2946): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145963.418:2947): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647363626563697A6E6676737265626B786669706976706268786F6F63707975203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145963.418:2948): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145963.420:2949): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145963.786:2950): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145963.787:2951): pid=22649 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145963.789:2952): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145963.789:2953): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145963.800:2954): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145963.800:2955): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145963.801:2956): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22653 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145963.820:2957): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145963.820:2958): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145963.890:2959): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145963.890:2960): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145963.891:2961): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145963.940:2962): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145963.941:2963): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E796C746E676761717862646E716D667A696D7578767261777574676C77736E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145963.941:2964): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145963.942:2965): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145964.108:2966): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145964.108:2967): pid=22683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145964.110:2968): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145964.111:2969): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145964.178:2970): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145964.178:2971): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145964.179:2972): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145964.228:2973): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145964.228:2974): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A6976737A6F6B6D6777787774637566716E686668677767626366696B7472203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145964.229:2975): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145964.230:2976): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145964.413:2977): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145964.414:2978): pid=22702 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145964.416:2979): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145964.416:2980): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145966.326:2981): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145966.326:2982): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145966.327:2983): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22729 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145966.376:2984): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145966.376:2985): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756F7271797A7A73726273636A6D677065646F6E727266696E6169676F7A77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145966.376:2986): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145966.378:2987): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145966.541:2988): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145966.541:2989): pid=22742 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145966.543:2990): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145966.543:2991): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145966.712:2992): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145966.712:2993): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145966.713:2994): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145966.732:2995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145966.732:2996): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145966.742:2997): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145966.742:2998): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145966.743:2999): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145966.766:3000): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145966.766:3001): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145966.778:3002): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145966.778:3003): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145966.779:3004): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145966.829:3005): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145966.829:3006): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696F6168777A786569637178686D7472636677717875696E7676716965637775203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145966.830:3007): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145966.831:3008): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145968.117:3009): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145968.117:3010): pid=22799 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145968.119:3011): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145968.119:3012): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145968.133:3013): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145968.133:3014): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145968.133:3015): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145968.154:3016): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145968.154:3017): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145968.341:3018): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145968.341:3019): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145968.342:3020): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145968.390:3021): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145968.391:3022): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6766636B61646B6F7370756B757A796F74716975757A6A7776716C746E7562203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145968.391:3023): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145968.392:3024): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145970.165:3025): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145970.165:3026): pid=22835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145970.168:3027): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145970.168:3028): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145970.382:3029): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145970.382:3030): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145970.383:3031): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145970.401:3032): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145970.401:3033): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145970.411:3034): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145970.411:3035): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145970.412:3036): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145970.436:3037): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145970.436:3038): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145970.448:3039): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145970.448:3040): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145970.449:3041): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145970.498:3042): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145970.498:3043): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7969766663776D6B6B6E6C726D7778646C6C6A7869726C6D68656B75686B726D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145970.499:3044): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145970.500:3045): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145970.666:3046): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145970.666:3047): pid=22896 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145970.668:3048): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145970.668:3049): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145970.682:3050): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145970.682:3051): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145970.683:3052): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145970.732:3053): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145970.733:3054): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D726A7575646A6C6E6F666E676E7A776573767566646C706779626A6270706D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145970.733:3055): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145970.734:3056): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145972.564:3057): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145972.565:3058): pid=22915 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145972.567:3059): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145972.567:3060): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145972.577:3061): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145972.577:3062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145972.578:3063): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145972.599:3064): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145972.599:3065): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145972.816:3066): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145972.816:3067): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145972.817:3068): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145972.865:3069): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145972.865:3070): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78727077696B636874786674676177676C736D647A6C647A666C77656A796568203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145972.866:3071): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145972.867:3072): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145973.030:3073): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145973.030:3074): pid=22967 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145973.032:3075): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145973.032:3076): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145973.195:3077): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145973.195:3078): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145973.196:3079): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145973.215:3080): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145973.215:3081): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145973.225:3082): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145973.225:3083): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145973.226:3084): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=22991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145973.249:3085): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145973.249:3086): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145973.264:3087): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145973.264:3088): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145973.265:3089): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145973.316:3090): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145973.316:3091): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61757868747866716867746F7064696162646D706F776A656379717876757A6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145973.316:3092): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145973.318:3093): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145974.522:3094): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145974.522:3095): pid=23024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145974.524:3096): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145974.524:3097): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145974.535:3098): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145974.535:3099): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145974.536:3100): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145974.555:3101): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145974.555:3102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145974.720:3103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145974.720:3104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145974.721:3105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23047 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145974.774:3106): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145974.774:3107): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7967647872736B6B6E79777076796E6B6275656B707665656475686A656E7171203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145974.775:3108): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145974.776:3109): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145977.243:3110): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145977.243:3111): pid=23060 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145977.245:3112): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145977.245:3113): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145977.609:3114): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145977.609:3115): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145977.610:3116): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145977.660:3117): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145977.660:3118): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A6C7361616C796A6368637A6D71646D6370786A6E716F67706A6B736A706D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145977.660:3119): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145977.662:3120): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145977.824:3121): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145977.824:3122): pid=23095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145977.827:3123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145977.827:3124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145977.990:3125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145977.990:3126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145977.991:3127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145978.009:3128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145978.009:3129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145978.019:3130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145978.019:3131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145978.020:3132): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145978.041:3133): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145978.041:3134): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145978.053:3135): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145978.053:3136): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145978.054:3137): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145978.103:3138): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145978.103:3139): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75666C7A73686579786979776F6D66626E637864757379666E76637863716E6B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145978.104:3140): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145978.105:3141): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145978.971:3142): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145978.971:3143): pid=23152 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145978.974:3144): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145978.974:3145): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145978.985:3146): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145978.985:3147): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145978.986:3148): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145979.007:3149): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145979.007:3150): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145979.177:3151): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145979.177:3152): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145979.178:3153): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145979.227:3154): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145979.227:3155): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74696A6F7362796D637A776965707770676571687362696D6872697067617568203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145979.228:3156): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145979.229:3157): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145979.644:3158): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145979.644:3159): pid=23188 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145979.646:3160): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145979.646:3161): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145980.094:3162): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145980.094:3163): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145980.094:3164): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145980.143:3165): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145980.143:3166): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A736C6A78636F6467696776667870626F6A6862626C656C677A6F716C6668203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145980.144:3167): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145980.145:3168): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145980.311:3169): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145980.311:3170): pid=23223 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145980.313:3171): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145980.313:3172): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145980.482:3173): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145980.482:3174): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145980.483:3175): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145980.501:3176): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145980.501:3177): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145980.511:3178): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145980.511:3179): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145980.512:3180): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145980.535:3181): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145980.535:3182): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145980.547:3183): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145980.547:3184): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145980.548:3185): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145980.600:3186): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145980.601:3187): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E616274786E6F6D75696A73777A6D64736667767763786E746A6A6D737665203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145980.601:3188): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145980.602:3189): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145981.366:3190): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145981.366:3191): pid=23280 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145981.368:3192): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145981.368:3193): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145981.379:3194): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145981.379:3195): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145981.380:3196): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145981.400:3197): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145981.400:3198): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145981.569:3199): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145981.569:3200): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145981.570:3201): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145981.621:3202): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145981.621:3203): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747977656E766F68666965796F70646F7A74797968676F7167776E68656E716C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145981.621:3204): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145981.622:3205): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145985.807:3206): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145985.807:3207): pid=23316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145985.809:3208): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145985.809:3209): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145986.172:3210): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145986.172:3211): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145986.173:3212): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145986.223:3213): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145986.223:3214): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E7A776E63706872716D7565626768786E626864666A7869777069616F7069203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145986.223:3215): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145986.225:3216): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145986.385:3217): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145986.385:3218): pid=23351 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145986.387:3219): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145986.387:3220): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145986.552:3221): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145986.552:3222): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145986.553:3223): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145986.572:3224): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145986.572:3225): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145986.582:3226): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145986.582:3227): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145986.583:3228): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23375 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145986.604:3229): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145986.605:3230): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145986.616:3231): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145986.616:3232): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145986.617:3233): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23395 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145986.667:3234): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145986.667:3235): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76737566776A637879686E63627878767468646D7663747A6C78656763657674203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145986.668:3236): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145986.669:3237): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145987.445:3238): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145987.445:3239): pid=23408 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145987.447:3240): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145987.447:3241): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145987.457:3242): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145987.458:3243): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145987.458:3244): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145987.478:3245): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145987.478:3246): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145987.645:3247): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145987.645:3248): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145987.646:3249): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145987.696:3250): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145987.696:3251): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7877766174707367767473756B64666A6B67706B7965776D73686A63636E626D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145987.696:3252): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145987.698:3253): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145989.796:3254): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145989.796:3255): pid=23444 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145989.798:3256): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145989.799:3257): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145990.162:3258): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145990.162:3259): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145990.162:3260): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145990.213:3261): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145990.213:3262): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D676E636C6C6564687470746168686E77656F6177716672616C65686C757A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145990.213:3263): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145990.214:3264): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145990.380:3265): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145990.381:3266): pid=23479 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145990.383:3267): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145990.383:3268): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145990.542:3269): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145990.542:3270): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145990.543:3271): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145990.561:3272): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145990.561:3273): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145990.571:3274): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145990.571:3275): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145990.572:3276): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23503 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145990.595:3277): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145990.595:3278): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145990.607:3279): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145990.607:3280): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145990.608:3281): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145990.657:3282): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145990.657:3283): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65736175736563786A736A6E696E75666F64706A756D6E6361716F7375677A6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145990.658:3284): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145990.659:3285): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145991.709:3286): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145991.709:3287): pid=23536 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145991.711:3288): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145991.711:3289): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145991.722:3290): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145991.722:3291): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145991.723:3292): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145991.743:3293): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145991.743:3294): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145991.911:3295): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145991.911:3296): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145991.912:3297): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145991.961:3298): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145991.961:3299): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73736777627961786A6C6F70727174677A76696A786A7966756D6B6573616B65203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145991.962:3300): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145991.963:3301): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145992.286:3302): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145992.287:3303): pid=23572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145992.289:3304): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145992.289:3305): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145992.484:3306): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145992.484:3307): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145992.485:3308): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145992.503:3309): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145992.503:3310): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145992.513:3311): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145992.513:3312): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145992.513:3313): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145992.535:3314): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145992.535:3315): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145992.547:3316): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145992.547:3317): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145992.548:3318): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145992.596:3319): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145992.596:3320): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7773767966726C697161776869706C647565736A7778697462626762657862203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145992.597:3321): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145992.598:3322): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145992.755:3323): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145992.755:3324): pid=23633 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145992.757:3325): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145992.757:3326): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145992.772:3327): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145992.772:3328): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145992.772:3329): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145992.821:3330): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145992.821:3331): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617677706E66617A6A667A6E786B616E646875756271676762706D6667736F77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145992.822:3332): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145992.823:3333): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145993.982:3334): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145993.982:3335): pid=23652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145993.985:3336): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145993.985:3337): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145993.997:3338): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145993.997:3339): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145993.998:3340): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145994.017:3341): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145994.017:3342): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145994.216:3343): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145994.216:3344): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145994.217:3345): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145994.266:3346): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145994.266:3347): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B61696969616178646C7976796B7566637765666461666C6272616574676671203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145994.266:3348): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145994.267:3349): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145994.428:3350): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145994.428:3351): pid=23701 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145994.431:3352): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145994.431:3353): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145994.592:3354): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145994.592:3355): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145994.593:3356): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145994.611:3357): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145994.611:3358): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145994.621:3359): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145994.621:3360): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145994.622:3361): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145994.643:3362): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145994.643:3363): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145994.655:3364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145994.655:3365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145994.656:3366): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23745 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145994.705:3367): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145994.705:3368): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D656C63787073726C7169726163736D7A666967636D6A736F77666B627169203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145994.705:3369): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145994.707:3370): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145995.760:3371): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145995.760:3372): pid=23758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145995.762:3373): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145995.762:3374): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145995.773:3375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145995.773:3376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145995.774:3377): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145995.794:3378): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145995.794:3379): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145996.056:3380): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145996.056:3381): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145996.057:3382): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23781 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145996.106:3383): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145996.106:3384): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78796E736F6B6376686B647A6E69686E74697A786779636F6C666B6F72766662203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145996.106:3385): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145996.108:3386): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145996.381:3387): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145996.381:3388): pid=23794 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145996.383:3389): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145996.383:3390): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145996.576:3391): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145996.576:3392): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145996.577:3393): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145996.595:3394): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145996.595:3395): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145996.605:3396): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145996.605:3397): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145996.606:3398): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145996.627:3399): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145996.627:3400): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145996.639:3401): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145996.639:3402): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145996.640:3403): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145996.689:3404): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145996.689:3405): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7467746671667968627A6D716B64657A62697A776F79677579626B7A6B707563203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145996.689:3406): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145996.690:3407): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145996.845:3408): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145996.845:3409): pid=23855 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145996.847:3410): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145996.847:3411): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145996.860:3412): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145996.860:3413): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145996.861:3414): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145996.910:3415): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145996.910:3416): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B76766375687779716A646B746D7276616564756274616B677062616B736762203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145996.911:3417): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145996.912:3418): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145997.884:3419): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145997.884:3420): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145997.886:3421): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145997.886:3422): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145997.897:3423): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145997.897:3424): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145997.898:3425): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23887 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739145997.918:3426): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145997.918:3427): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145998.494:3428): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145998.494:3429): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145998.494:3430): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145998.543:3431): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145998.543:3432): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75707A73796577647369736E6768746961766D61706D6A6A6D73626E6E756A74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145998.543:3433): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145998.544:3434): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145998.734:3435): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739145998.734:3436): pid=23943 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739145998.736:3437): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739145998.736:3438): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739145999.032:3439): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739145999.032:3440): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739145999.033:3441): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=23973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739145999.082:3442): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739145999.082:3443): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A6A6775797178756F666277667962656D68726D6F6D7866667969776A657A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739145999.083:3444): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739145999.084:3445): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146003.529:3446): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146003.529:3447): pid=23986 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146003.532:3448): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146003.532:3449): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146003.750:3450): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146003.750:3451): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146003.751:3452): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146003.800:3453): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146003.800:3454): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E786367796C786761727364766D6670696A6F77766E7362787269727A646C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146003.801:3455): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146003.802:3456): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146003.952:3457): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146003.952:3458): pid=24034 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146003.955:3459): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146003.955:3460): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146004.558:3461): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146004.558:3462): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146004.559:3463): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146004.610:3464): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146004.610:3465): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7177616C746D71746C677169756C62726E6A70686461726169676C68626B6564203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146004.610:3466): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146004.612:3467): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146004.782:3468): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146004.782:3469): pid=24079 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146004.784:3470): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146004.784:3471): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146005.076:3472): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146005.076:3473): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146005.076:3474): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146005.125:3475): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146005.125:3476): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7673616473787073796C766F6A67756A7969617A686D666A787863756F716261203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146005.125:3477): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146005.126:3478): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146007.534:3479): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146007.534:3480): pid=24123 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146007.536:3481): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146007.536:3482): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146007.756:3483): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146007.756:3484): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146007.757:3485): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24246 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146007.807:3486): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146007.808:3487): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262616374686C706F756F6978746E777167746E776C737A7A63776A6A726477203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146007.808:3488): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146007.810:3489): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146007.974:3490): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146007.974:3491): pid=24259 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146007.976:3492): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146007.976:3493): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146008.588:3494): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146008.588:3495): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146008.589:3496): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146008.639:3497): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146008.639:3498): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656865746B6479767169706470646F6A796E75696B6B746677656870776C6162203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146008.640:3499): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146008.641:3500): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146008.814:3501): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146008.814:3502): pid=24304 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146008.817:3503): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146008.817:3504): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146009.118:3505): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146009.118:3506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146009.119:3507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146009.168:3508): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146009.169:3509): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C6977646D70776D6A7767626968687873737871747870796D7677696C716A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146009.169:3510): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146009.170:3511): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146014.191:3512): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146014.191:3513): pid=24347 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146014.193:3514): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146014.193:3515): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146014.389:3516): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146014.389:3517): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146014.390:3518): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146014.439:3519): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146014.439:3520): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79796C7777756163677874626E62776E6B706B7A77726C6E6A63647473657271203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146014.439:3521): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146014.441:3522): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146014.597:3523): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146014.597:3524): pid=24404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146014.599:3525): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146014.599:3526): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146015.179:3527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146015.179:3528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146015.180:3529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146015.229:3530): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146015.229:3531): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62797A6F626765766774646A7478697771686E697562716669666E7475796664203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146015.229:3532): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146015.230:3533): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146015.397:3534): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146015.398:3535): pid=24449 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146015.400:3536): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146015.400:3537): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146015.764:3538): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146015.764:3539): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146015.765:3540): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146015.817:3541): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146015.817:3542): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6167666A7067656C6F617468646863766F66666B736D71636178746F71706C63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146015.818:3543): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146015.819:3544): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146021.448:3545): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146021.448:3546): pid=24493 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146021.450:3547): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146021.450:3548): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146021.649:3549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146021.649:3550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146021.650:3551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24651 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146021.701:3552): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146021.701:3553): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7476626264686E74736B78696E6571787763626A6B6368626C76616576796D63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146021.702:3554): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146021.703:3555): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146021.861:3556): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146021.862:3557): pid=24664 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146021.864:3558): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146021.864:3559): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146022.462:3560): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146022.462:3561): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146022.463:3562): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146022.523:3563): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146022.523:3564): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657A767963707975667A7276676578696F7A67796B68756F7673686D706C7974203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146022.523:3565): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146022.525:3566): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146022.700:3567): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146022.701:3568): pid=24709 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146022.703:3569): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146022.703:3570): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146023.013:3571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146023.013:3572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146023.014:3573): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24740 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146023.066:3574): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146023.066:3575): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D6C7969706A796F676567666767796665716B756E756F71656E7A6579726C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146023.066:3576): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146023.068:3577): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146030.595:3578): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146030.595:3579): pid=24753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146030.597:3580): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146030.597:3581): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146030.799:3582): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146030.799:3583): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146030.799:3584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146030.851:3585): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146030.851:3586): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71786D626F737578796D687A656868636E6A6166626171726A616762637A6565203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146030.852:3587): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146030.853:3588): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146031.017:3589): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146031.017:3590): pid=24916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146031.019:3591): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146031.019:3592): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146031.599:3593): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146031.599:3594): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146031.599:3595): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24948 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146031.652:3596): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146031.652:3597): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C6A746A787675766172667561726E6F736B747A6F627968796D63776C7079203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146031.652:3598): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146031.654:3599): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146031.836:3600): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146031.836:3601): pid=24961 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146031.838:3602): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146031.838:3603): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146032.129:3604): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146032.129:3605): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146032.130:3606): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=24992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146032.179:3607): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146032.179:3608): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6779626E646C6B7762727764796F6A65737562767672756F766171696E707165203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146032.180:3609): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146032.181:3610): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146038.315:3611): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146038.315:3612): pid=25005 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146038.318:3613): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146038.318:3614): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146038.513:3615): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146038.513:3616): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146038.514:3617): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146038.563:3618): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146038.564:3619): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B707A706C73717A6A68626D6E7868697662726A75746B70776C7473727673203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146038.564:3620): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146038.565:3621): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146038.719:3622): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146038.719:3623): pid=25050 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146038.721:3624): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146038.721:3625): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146039.306:3626): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146039.306:3627): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146039.307:3628): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146039.356:3629): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146039.356:3630): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F737371707277626F73786676696E79636E71627770637A686B6163696B786D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146039.357:3631): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146039.358:3632): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146039.525:3633): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146039.525:3634): pid=25095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146039.527:3635): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146039.528:3636): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146039.830:3637): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146039.830:3638): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146039.831:3639): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25126 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146039.879:3640): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146039.880:3641): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C766161736D626371677A677867747879736D667861677868796C7A6F666B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146039.880:3642): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146039.881:3643): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146045.605:3644): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146045.605:3645): pid=25139 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146045.608:3646): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146045.608:3647): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146045.795:3648): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146045.795:3649): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146045.795:3650): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146045.845:3651): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146045.845:3652): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7279717A7666697979736F616166756D7873756673686E667A6276706D6E7069203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146045.845:3653): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146045.847:3654): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146046.008:3655): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146046.008:3656): pid=25184 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146046.010:3657): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146046.010:3658): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146046.565:3659): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146046.565:3660): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146046.566:3661): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146046.616:3662): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146046.616:3663): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61667966646B75786B746E6E726D69616E76786C7376647370627176686B6F62203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146046.616:3664): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146046.618:3665): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146046.786:3666): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146046.787:3667): pid=25229 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146046.789:3668): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146046.789:3669): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146047.077:3670): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146047.077:3671): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146047.078:3672): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146047.127:3673): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146047.127:3674): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6661627976736B6C6E62676374786F68716D69617962796F6E616274727177203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146047.127:3675): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146047.128:3676): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146052.668:3677): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146052.668:3678): pid=25273 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146052.670:3679): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146052.670:3680): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146052.856:3681): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146052.856:3682): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146052.857:3683): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146052.907:3684): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146052.907:3685): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6673737370656F74787A717A61737A79716766756972616B737164656C6369203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146052.907:3686): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146052.909:3687): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146053.063:3688): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146053.063:3689): pid=25332 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146053.066:3690): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146053.066:3691): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146053.842:3692): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146053.842:3693): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146053.842:3694): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146053.892:3695): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146053.892:3696): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E7072766465776C7A65736F6D767061757270726E6563746C627675797A6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146053.892:3697): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146053.894:3698): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=ADD_GROUP msg=audit(1739146054.056:3699): pid=25382 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="etcd"
type=GRP_MGMT msg=audit(1739146054.060:3700): pid=25382 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="etcd"
type=USER_END msg=audit(1739146054.094:3701): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146054.094:3702): pid=25379 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146054.096:3703): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146054.096:3704): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146054.167:3705): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146054.167:3706): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146054.168:3707): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146054.218:3708): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146054.218:3709): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C71696F7261616D6C6E6B616D7864656271757765676773666C736165717574203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146054.218:3710): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146054.220:3711): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=ADD_USER msg=audit(1739146054.412:3712): pid=25408 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="etcd" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739146054.468:3713): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146054.469:3714): pid=25404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146054.471:3715): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146054.471:3716): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146054.556:3717): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146054.556:3718): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146054.557:3719): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146054.607:3720): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146054.607:3721): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B616C6F6F646D796C746C6F6D6562706A65786C756467646F78656764666768203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146054.607:3722): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146054.609:3723): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146054.759:3724): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146054.759:3725): pid=25431 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146054.761:3726): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146054.761:3727): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146054.832:3728): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146054.832:3729): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146054.833:3730): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146054.882:3731): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146054.882:3732): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6776716267796B66616E69726F706A696F6573657372646566776A6A7A6466203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146054.882:3733): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146054.884:3734): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.082:3735): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146055.082:3736): pid=25450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.084:3737): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146055.084:3738): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146055.211:3739): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146055.211:3740): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146055.212:3741): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146055.261:3742): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146055.262:3743): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B756A7A626E666A78716F737269636B6F6974766C686D6B77667465746564203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146055.262:3744): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146055.263:3745): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.411:3746): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146055.411:3747): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.414:3748): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146055.414:3749): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146055.515:3750): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146055.515:3751): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146055.516:3752): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25481 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146055.566:3753): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146055.566:3754): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D7073636F6A6177647A6A63776F6D7A676765746776657A6F6675706B6F6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146055.567:3755): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146055.568:3756): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.717:3757): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146055.717:3758): pid=25494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.719:3759): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146055.719:3760): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146055.748:3761): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146055.748:3762): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146055.749:3763): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25499 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146055.799:3764): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146055.799:3765): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766366657367706664716C7276736F6D6961617069766A787A6B6C7868736778203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146055.800:3766): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146055.801:3767): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.953:3768): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146055.953:3769): pid=25512 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146055.955:3770): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146055.955:3771): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146055.988:3772): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146055.988:3773): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146055.989:3774): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25516 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146056.039:3775): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146056.039:3776): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D636E72616871686E6B666764746963626A6A617A6D6E7262676770676C707A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146056.040:3777): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146056.041:3778): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.192:3779): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146056.192:3780): pid=25529 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.194:3781): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146056.194:3782): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146056.223:3783): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146056.223:3784): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146056.224:3785): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25533 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146056.273:3786): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146056.273:3787): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7068736C6E757A636F616F636A646F6569737563786E79626A7678747A6677203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146056.274:3788): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146056.275:3789): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.421:3790): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146056.421:3791): pid=25546 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.423:3792): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146056.423:3793): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146056.451:3794): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146056.451:3795): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146056.452:3796): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146056.501:3797): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146056.501:3798): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6173746F647979686F716664727A787363677869736C747A6F6271756B79796C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146056.501:3799): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146056.502:3800): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.647:3801): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146056.647:3802): pid=25563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.649:3803): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146056.649:3804): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146056.709:3805): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146056.709:3806): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146056.709:3807): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146056.761:3808): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146056.761:3809): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63716E6763746B6E636F7466787777787A71646A66736F68656B63746F65626A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146056.761:3810): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146056.763:3811): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.909:3812): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146056.909:3813): pid=25581 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146056.911:3814): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146056.911:3815): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146056.940:3816): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146056.940:3817): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146056.941:3818): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146056.989:3819): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146056.990:3820): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7763716E6B6573726972677A79686D646F716D6B727761616D6B637970626C77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146056.990:3821): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146056.991:3822): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146057.134:3823): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146057.135:3824): pid=25599 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146057.137:3825): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146057.137:3826): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146057.165:3827): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146057.165:3828): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146057.166:3829): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146057.218:3830): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146057.218:3831): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B696A7A706C71656665696B6F64756D6F73616674686D64746762756C6675203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146057.218:3832): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146057.219:3833): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146057.368:3834): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146057.368:3835): pid=25616 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146057.370:3836): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146057.370:3837): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146057.939:3838): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146057.939:3839): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146057.940:3840): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146057.990:3841): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146057.990:3842): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79626274726C647172786861667961626D696A6C746D6E64687165766C707A63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146057.991:3843): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146057.992:3844): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.157:3845): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146058.157:3846): pid=25648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.159:3847): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.159:3848): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.220:3849): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.220:3850): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.221:3851): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146058.270:3852): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146058.270:3853): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75747A7774656267706A6D6573636A7763797772657670617A72766375666375203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146058.270:3854): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146058.271:3855): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.431:3856): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146058.431:3857): pid=25667 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.433:3858): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.433:3859): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.499:3860): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.499:3861): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.500:3862): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146058.517:3863): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.517:3864): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.527:3865): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.527:3866): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.528:3867): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146058.549:3868): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.549:3869): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.695:3870): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.695:3871): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.696:3872): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146058.746:3873): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146058.746:3874): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F726C626A62796C7A6362797269616A776576737771766D78636D656D7767203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146058.746:3875): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146058.747:3876): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.896:3877): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146058.896:3878): pid=25720 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146058.898:3879): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.899:3880): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.912:3881): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.912:3882): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.913:3883): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146058.933:3884): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.933:3885): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.943:3886): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.943:3887): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.944:3888): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146058.964:3889): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146058.964:3890): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146058.975:3891): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146058.975:3892): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146058.976:3893): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146059.028:3894): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146059.028:3895): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736E6D6572756A616A6C6F7170636161646D706B6A6C77627571726F6A656761203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146059.028:3896): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146059.029:3897): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.215:3898): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146059.215:3899): pid=25767 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.217:3900): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.217:3901): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.228:3902): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.228:3903): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.229:3904): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.248:3905): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.248:3906): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.302:3907): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.302:3908): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.303:3909): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25788 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.322:3910): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.322:3911): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.331:3912): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.331:3913): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.332:3914): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.354:3915): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.354:3916): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.374:3917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.374:3918): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.375:3919): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146059.425:3920): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146059.426:3921): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6267636A686A67636876726F747067707375776D7665726C6E706874656A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146059.426:3922): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146059.427:3923): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.571:3924): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146059.571:3925): pid=25835 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.573:3926): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.573:3927): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.588:3928): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.588:3929): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.589:3930): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.609:3931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.609:3932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.619:3933): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.619:3934): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.620:3935): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.639:3936): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.639:3937): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.651:3938): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.651:3939): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.652:3940): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146059.702:3941): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146059.702:3942): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73766B6871786F67686F6F727770736673666B6272786F66656E7074616F746D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146059.703:3943): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146059.704:3944): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.868:3945): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146059.868:3946): pid=25882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146059.871:3947): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.871:3948): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.885:3949): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.885:3950): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.886:3951): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146059.906:3952): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146059.906:3953): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146059.978:3954): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146059.978:3955): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146059.979:3956): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146060.029:3957): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146060.030:3958): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146060.030:3959): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146060.031:3960): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146061.435:3961): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146061.435:3962): pid=25916 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146061.437:3963): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146061.437:3964): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146061.968:3965): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146061.968:3966): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146061.969:3967): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146062.019:3968): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146062.019:3969): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74657675796C616568637374716B64656669626E6E757A62646F6E6C6D666D62203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146062.019:3970): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146062.021:3971): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146062.180:3972): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146062.180:3973): pid=25966 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146062.183:3974): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146062.183:3975): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146062.330:3976): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146062.330:3977): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146062.331:3978): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146062.349:3979): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146062.349:3980): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146062.359:3981): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146062.359:3982): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146062.360:3983): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=25990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146062.381:3984): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146062.381:3985): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146062.393:3986): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146062.393:3987): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146062.394:3988): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146062.443:3989): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146062.443:3990): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61696671737A706C7276646A6767756965697A79646566656E666B6E6A707563203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146062.443:3991): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146062.445:3992): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146062.603:3993): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146062.604:3994): pid=26023 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146062.606:3995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146062.606:3996): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146062.617:3997): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146062.617:3998): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146062.618:3999): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146062.637:4000): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146062.637:4001): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146062.717:4002): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146062.717:4003): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146062.717:4004): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146062.766:4005): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146062.766:4006): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7470777862676C6F7A6974666176626E736A7471677374647A6964636B716F67203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146062.767:4007): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146062.768:4008): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146063.617:4009): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146063.617:4010): pid=26059 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146063.619:4011): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146063.619:4012): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146063.801:4013): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146063.801:4014): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146063.802:4015): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146063.854:4016): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146063.855:4017): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C746C646D69626A617A7178796B68716D73706F627968736778626D6B7274203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146063.855:4018): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146063.857:4019): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146071.873:4020): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146071.873:4021): pid=26093 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146071.875:4022): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146071.875:4023): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146071.918:4024): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146071.918:4025): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146071.919:4026): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146071.969:4027): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146071.969:4028): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A786C6676636D647A667A68656B696E786764786F7963626576627A6B6476203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146071.969:4029): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146071.971:4030): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146072.299:4031): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146072.300:4032): pid=26348 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146072.302:4033): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.302:4034): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.460:4035): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.461:4036): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.461:4037): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146072.479:4038): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.479:4039): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.489:4040): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.489:4041): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.490:4042): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26414 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146072.511:4043): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.511:4044): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.533:4045): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.533:4046): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.534:4047): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26434 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146072.583:4048): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146072.583:4049): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717363686464776E6F6975616969697363706F79696D7363766F796962617A79203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146072.584:4050): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146072.585:4051): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146072.731:4052): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146072.731:4053): pid=26447 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146072.733:4054): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.733:4055): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.747:4056): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.747:4057): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.748:4058): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146072.768:4059): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.768:4060): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.779:4061): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.779:4062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.780:4063): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146072.800:4064): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146072.800:4065): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146072.812:4066): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146072.812:4067): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146072.813:4068): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26481 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146072.864:4069): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146072.864:4070): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B756A7771716274776F6E78766F7269667A7861796D66746E67726F79706B6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146072.864:4071): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146072.865:4072): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.026:4073): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146073.026:4074): pid=26494 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.028:4075): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.028:4076): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.040:4077): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.040:4078): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.040:4079): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26498 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146073.060:4080): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.060:4081): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.183:4082): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.183:4083): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.184:4084): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146073.233:4085): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146073.234:4086): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62666371767262747A6B797179636861776A676576646A786A71627071756A61203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146073.234:4087): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146073.235:4088): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.388:4089): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146073.388:4090): pid=26530 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.389:4091): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.389:4092): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.448:4093): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.448:4094): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.449:4095): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146073.505:4096): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146073.505:4097): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F726873757661646C71756A747A76786B69616864716E7A797A7370776875203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146073.506:4098): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146073.507:4099): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.661:4100): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146073.661:4101): pid=26550 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146073.664:4102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.664:4103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.751:4104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.751:4105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.752:4106): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146073.770:4107): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.771:4108): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.781:4109): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.781:4110): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.781:4111): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146073.803:4112): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146073.803:4113): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146073.815:4114): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146073.815:4115): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146073.816:4116): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26593 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146073.866:4117): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146073.866:4118): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F62716A707173617974707275726A7372736365756569736C716565797468203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146073.867:4119): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146073.868:4120): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146074.129:4121): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146074.129:4122): pid=26606 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146074.131:4123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146074.131:4124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146074.142:4125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146074.142:4126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146074.143:4127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146074.163:4128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146074.163:4129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146074.314:4130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146074.314:4131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146074.315:4132): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146074.365:4133): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146074.365:4134): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146074.365:4135): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146074.366:4136): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146079.530:4137): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146079.530:4138): pid=26642 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146079.532:4139): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146079.532:4140): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146079.675:4141): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146079.675:4142): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146079.676:4143): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146079.696:4144): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146079.696:4145): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146079.706:4146): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146079.706:4147): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146079.707:4148): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146079.733:4149): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146079.733:4150): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146079.814:4151): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146079.814:4152): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146079.814:4153): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146079.864:4154): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146079.864:4155): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706E7473686776626B796A696261786E6A6363636C726B776373627A656976203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146079.864:4156): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146079.866:4157): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.015:4158): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146080.016:4159): pid=26706 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.018:4160): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.018:4161): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.032:4162): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.032:4163): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.032:4164): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.056:4165): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.056:4166): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.070:4167): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.070:4168): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.071:4169): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.092:4170): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.092:4171): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.106:4172): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.106:4173): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.107:4174): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26740 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146080.159:4175): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146080.159:4176): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E6B6B6A7578636E6F6F756E7A776377776873706D6E677A74616973687578203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146080.160:4177): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146080.161:4178): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.325:4179): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146080.325:4180): pid=26753 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.327:4181): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.327:4182): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.339:4183): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.339:4184): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.340:4185): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.360:4186): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.360:4187): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.443:4188): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.443:4189): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.444:4190): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26776 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.463:4191): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.463:4192): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.473:4193): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.473:4194): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.474:4195): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26790 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.496:4196): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.496:4197): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.516:4198): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.516:4199): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.517:4200): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146080.567:4201): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146080.567:4202): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6F696E706B766C7075616D747664646A74687774696B746D78616863616B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146080.567:4203): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146080.569:4204): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.717:4205): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146080.717:4206): pid=26823 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146080.719:4207): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.719:4208): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.733:4209): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.733:4210): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.734:4211): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.758:4212): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.758:4213): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.770:4214): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.770:4215): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.771:4216): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146080.793:4217): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146080.793:4218): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146080.806:4219): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146080.806:4220): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146080.807:4221): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146080.866:4222): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146080.866:4223): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B66716C65736F626F7A79637361756D7970636D616670686A6E7476756979203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146080.867:4224): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146080.868:4225): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146081.042:4226): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146081.042:4227): pid=26870 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146081.044:4228): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146081.044:4229): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146081.055:4230): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146081.055:4231): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146081.056:4232): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146081.076:4233): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146081.076:4234): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146081.164:4235): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146081.164:4236): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146081.165:4237): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146081.216:4238): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146081.216:4239): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A687A75756D6A676A6A6B6B707A6872756C686D6176726578796B61746C6B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146081.216:4240): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146081.218:4241): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146081.649:4242): prog-id=127 op=LOAD
type=BPF msg=audit(1739146081.649:4243): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.649:4244): prog-id=128 op=LOAD
type=BPF msg=audit(1739146081.650:4245): prog-id=129 op=LOAD
type=BPF msg=audit(1739146081.650:4246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.650:4247): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.650:4248): prog-id=130 op=LOAD
type=BPF msg=audit(1739146081.650:4249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.651:4250): prog-id=131 op=LOAD
type=BPF msg=audit(1739146081.651:4251): prog-id=132 op=LOAD
type=BPF msg=audit(1739146081.651:4252): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.651:4253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.655:4254): prog-id=133 op=LOAD
type=BPF msg=audit(1739146081.655:4255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.657:4256): prog-id=134 op=LOAD
type=BPF msg=audit(1739146081.657:4257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.657:4258): prog-id=135 op=LOAD
type=BPF msg=audit(1739146081.657:4259): prog-id=136 op=LOAD
type=BPF msg=audit(1739146081.657:4260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146081.657:4261): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146081.679:4262): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146081.679:4263): pid=26907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146081.682:4264): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146081.682:4265): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146081.748:4266): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146081.748:4267): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146081.749:4268): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=26943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146081.801:4269): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146081.802:4270): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707077616677716E71756E6E72636D67626C6F706A6D63616461787768727077203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146081.802:4271): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146081.804:4272): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146082.261:4273): prog-id=137 op=LOAD
type=BPF msg=audit(1739146082.261:4274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.261:4275): prog-id=138 op=LOAD
type=BPF msg=audit(1739146082.261:4276): prog-id=139 op=LOAD
type=BPF msg=audit(1739146082.261:4277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.261:4278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.262:4279): prog-id=140 op=LOAD
type=BPF msg=audit(1739146082.262:4280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.263:4281): prog-id=141 op=LOAD
type=BPF msg=audit(1739146082.263:4282): prog-id=142 op=LOAD
type=BPF msg=audit(1739146082.263:4283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.263:4284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.267:4285): prog-id=143 op=LOAD
type=BPF msg=audit(1739146082.267:4286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.268:4287): prog-id=144 op=LOAD
type=BPF msg=audit(1739146082.268:4288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.268:4289): prog-id=145 op=LOAD
type=BPF msg=audit(1739146082.268:4290): prog-id=146 op=LOAD
type=BPF msg=audit(1739146082.268:4291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146082.268:4292): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739146083.582:4293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=etcd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146083.603:4294): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146083.603:4295): pid=26956 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146083.605:4296): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146083.605:4297): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146083.719:4298): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146083.719:4299): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146083.720:4300): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146083.769:4301): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146083.769:4302): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146083.770:4303): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146083.771:4304): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146083.986:4305): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146083.986:4306): pid=27020 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146083.988:4307): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146083.988:4308): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.105:4309): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.105:4310): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.106:4311): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146084.156:4312): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146084.156:4313): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146084.157:4314): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146084.158:4315): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146084.330:4316): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146084.331:4317): pid=27056 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146084.333:4318): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.333:4319): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.537:4320): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.537:4321): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.538:4322): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27079 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146084.556:4323): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.556:4324): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.567:4325): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.567:4326): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.567:4327): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27093 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146084.589:4328): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.589:4329): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.670:4330): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.670:4331): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.671:4332): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146084.720:4333): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146084.720:4334): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74746772697472666871696C646C71706C6F6D6E7067706769776B776B787770203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146084.720:4335): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146084.722:4336): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146084.911:4337): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146084.911:4338): pid=27126 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146084.913:4339): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.913:4340): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.927:4341): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.927:4342): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.928:4343): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27133 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146084.950:4344): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.950:4345): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.961:4346): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.961:4347): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.962:4348): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146084.983:4349): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146084.983:4350): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146084.995:4351): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146084.995:4352): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146084.996:4353): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146085.047:4354): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146085.047:4355): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786164656163687575656773676D7363797A737378767A6B7863797270656D7A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146085.047:4356): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146085.049:4357): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146085.215:4358): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146085.216:4359): pid=27175 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146085.218:4360): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146085.218:4361): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146085.229:4362): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146085.229:4363): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146085.230:4364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146085.250:4365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146085.250:4366): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146085.455:4367): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146085.455:4368): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146085.456:4369): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146085.475:4370): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146085.475:4371): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146085.486:4372): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146085.486:4373): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146085.486:4374): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146085.509:4375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146085.509:4376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146085.589:4377): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146085.589:4378): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146085.589:4379): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146085.639:4380): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146085.639:4381): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E6E6A6267616B69756C6E6C65706D6D7375787477736263726F62756D6372203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146085.639:4382): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146085.641:4383): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146085.804:4384): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146085.804:4385): pid=27251 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146085.806:4386): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146085.806:4387): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146085.820:4388): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146085.820:4389): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146085.821:4390): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146085.871:4391): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146085.871:4392): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A73787265776E67767A667A66667A7A72626275796676736F66666F66736F74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146085.871:4393): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146085.872:4394): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146086.032:4395): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146086.032:4396): pid=27270 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146086.034:4397): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146086.034:4398): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146086.045:4399): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146086.045:4400): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146086.046:4401): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146086.067:4402): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146086.067:4403): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146086.193:4404): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146086.193:4405): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146086.194:4406): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146086.244:4407): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146086.244:4408): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6974676873796C656D7A646D7A626D7A6E76756D62666B7772746C77686B6A64203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146086.244:4409): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146086.246:4410): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146086.819:4411): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146086.819:4412): pid=27306 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146086.821:4413): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146086.821:4414): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146086.929:4415): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146086.929:4416): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146086.930:4417): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27349 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146086.980:4418): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146086.980:4419): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7977796F726E6E74787A7A786D797377716F6E727A79787A786C64737A776A76203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146086.980:4420): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146086.982:4421): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.143:4422): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146087.143:4423): pid=27362 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.145:4424): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146087.145:4425): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146087.205:4426): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146087.205:4427): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146087.206:4428): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27368 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146087.257:4429): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146087.257:4430): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B696D7A69766B6C6F6E70656C636C786961736E78766C756D6E73796468726F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146087.257:4431): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146087.259:4432): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.407:4433): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146087.407:4434): pid=27381 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.409:4435): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146087.409:4436): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146087.468:4437): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146087.468:4438): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146087.469:4439): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146087.519:4440): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146087.519:4441): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6375756E667A796F6B6B656569776E67706E756B6D6B7863786370736A6D7669203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727204554434443544C5F4150493D32202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146087.519:4442): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146087.520:4443): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.695:4444): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146087.696:4445): pid=27400 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146087.698:4446): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146087.698:4447): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146087.786:4448): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146087.787:4449): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146087.787:4450): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146087.838:4451): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146087.838:4452): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C627675656B6B6E7A6676686A686B6565707A6B7269717863706C75636962203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727204554434443544C5F4150493D33204554434443544C5F454E44504F494E54533D68747470733A2F2F31302E302E302E32393A32333739204554434443544C5F434552543D2F6574632F73736C2F657463642F73736C2F61646D696E2D636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D6B38732D6D616E6966657374732D3133342D312E70656D204554434443544C5F4B45593D2F6574632F73736C2F657463642F73736C2F61646D696E2D636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D6B38732D6D616E6966657374732D3133342D312D6B65792E70656D204554434443544C5F4341434552543D2F6574632F73736C2F657463642F73736C2F63612E70656D202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146087.838:4453): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146087.840:4454): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146088.015:4455): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146088.015:4456): pid=27425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146088.017:4457): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146088.017:4458): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146088.078:4459): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146088.078:4460): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146088.079:4461): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146088.128:4462): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146088.128:4463): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D63796B6B6A6371766767716F756D6F6472766B6B676B68786164666A6B68203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146088.128:4464): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146088.130:4465): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146088.545:4466): prog-id=147 op=LOAD
type=BPF msg=audit(1739146088.545:4467): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.545:4468): prog-id=148 op=LOAD
type=BPF msg=audit(1739146088.545:4469): prog-id=149 op=LOAD
type=BPF msg=audit(1739146088.545:4470): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.545:4471): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.546:4472): prog-id=150 op=LOAD
type=BPF msg=audit(1739146088.546:4473): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.547:4474): prog-id=151 op=LOAD
type=BPF msg=audit(1739146088.547:4475): prog-id=152 op=LOAD
type=BPF msg=audit(1739146088.547:4476): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.547:4477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.551:4478): prog-id=153 op=LOAD
type=BPF msg=audit(1739146088.551:4479): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.552:4480): prog-id=154 op=LOAD
type=BPF msg=audit(1739146088.552:4481): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.552:4482): prog-id=155 op=LOAD
type=BPF msg=audit(1739146088.552:4483): prog-id=156 op=LOAD
type=BPF msg=audit(1739146088.552:4484): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146088.552:4485): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146088.573:4486): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146088.574:4487): pid=27450 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146088.576:4488): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146088.576:4489): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146088.637:4490): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146088.637:4491): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146088.638:4492): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146088.688:4493): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146088.688:4494): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63797070646D757368786777637077736D716565766E62666875686D777A766E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146088.689:4495): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146088.690:4496): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739146088.975:4497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=etcd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739146097.511:4498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=etcd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146097.531:4499): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146097.531:4500): pid=27499 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146097.534:4501): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146097.534:4502): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146097.595:4503): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146097.595:4504): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146097.596:4505): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27516 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146097.616:4506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146097.616:4507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146097.626:4508): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146097.626:4509): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146097.626:4510): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27530 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146097.648:4511): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146097.648:4512): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146097.660:4513): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146097.660:4514): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146097.661:4515): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146097.710:4516): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146097.710:4517): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62616D62646772727273716577716D7161707475746471626D786A6E6E6E70203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146097.711:4518): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146097.712:4519): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146098.043:4520): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146098.043:4521): pid=27563 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146098.046:4522): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146098.046:4523): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146098.057:4524): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146098.057:4525): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146098.058:4526): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146098.078:4527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146098.078:4528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146098.632:4529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146098.632:4530): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146098.633:4531): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146098.682:4532): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146098.682:4533): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71786D6F6C6C72646B7864716775617477737A6E75696A746261726474636F63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146098.682:4534): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146098.684:4535): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146098.913:4536): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146098.913:4537): pid=27617 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146098.916:4538): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146098.916:4539): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146099.229:4540): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146099.229:4541): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146099.230:4542): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146099.280:4543): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146099.280:4544): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A65716E69686C6D6472636B6471676867736D61747166647663616677786E6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146099.281:4545): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146099.283:4546): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146099.453:4547): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146099.454:4548): pid=27693 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146099.455:4549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146099.455:4550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146099.586:4551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146099.586:4552): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146099.586:4553): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146099.636:4554): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146099.636:4555): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62747167756A6A70686B67616962787778776E666367786C70696465656271203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146099.636:4556): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146099.638:4557): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146099.803:4558): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146099.803:4559): pid=27728 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146099.805:4560): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146099.805:4561): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146100.247:4562): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146100.247:4563): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146100.248:4564): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146100.267:4565): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146100.267:4566): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146100.277:4567): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146100.277:4568): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146100.278:4569): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27750 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146100.300:4570): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146100.300:4571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146100.313:4572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146100.313:4573): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146100.314:4574): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146100.364:4575): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146100.364:4576): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63766F796474766E696E716761706E76746778667A6B6473766B647863617769203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146100.365:4577): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146100.366:4578): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.005:4579): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146101.006:4580): pid=27783 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.008:4581): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146101.008:4582): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146101.020:4583): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146101.020:4584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146101.021:4585): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27787 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146101.041:4586): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146101.041:4587): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146101.440:4588): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146101.440:4589): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146101.441:4590): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146101.491:4591): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146101.491:4592): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7967697661686B737174796163616779706E7170696D626C75726A756F716F6A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146101.492:4593): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146101.493:4594): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.656:4595): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146101.656:4596): pid=27841 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.659:4597): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146101.659:4598): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146101.712:4599): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146101.712:4600): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146101.713:4601): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146101.764:4602): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146101.764:4603): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146101.764:4604): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146101.765:4605): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.927:4606): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146101.927:4607): pid=27863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146101.929:4608): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146101.929:4609): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146101.986:4610): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146101.986:4611): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146101.986:4612): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27870 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146102.036:4613): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146102.036:4614): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646C6278676D616A6573746F636F7666786D72786C6872736266617363746F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146102.037:4615): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146102.038:4616): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.200:4617): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146102.200:4618): pid=27883 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.203:4619): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146102.203:4620): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146102.229:4621): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146102.229:4622): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146102.230:4623): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27888 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146102.282:4624): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146102.282:4625): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E697066776574706C687979786876726E7679676175746F746D7072656F7764203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146102.282:4626): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146102.284:4627): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.445:4628): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146102.445:4629): pid=27901 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.447:4630): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146102.447:4631): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146102.683:4632): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146102.683:4633): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146102.684:4634): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146102.734:4635): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146102.734:4636): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A627A796A6A6473667A66796C646A6D777468686C6F7768747A756373726765203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146102.734:4637): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146102.736:4638): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.903:4639): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146102.903:4640): pid=27919 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146102.906:4641): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146102.906:4642): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146102.961:4643): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146102.961:4644): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146102.962:4645): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146102.981:4646): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146102.981:4647): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146102.992:4648): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146102.992:4649): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146102.992:4650): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146103.016:4651): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.016:4652): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.029:4653): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.029:4654): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.030:4655): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146103.079:4656): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146103.079:4657): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7467727177757963756167617177766A6771756668707769736A616664687474203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146103.080:4658): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146103.081:4659): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.236:4660): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146103.237:4661): pid=27974 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.239:4662): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.239:4663): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.253:4664): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.253:4665): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.254:4666): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146103.277:4667): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.277:4668): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.288:4669): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.288:4670): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.289:4671): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=27993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146103.309:4672): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.309:4673): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.322:4674): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.322:4675): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.323:4676): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28008 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146103.372:4677): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146103.372:4678): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D636C7A7275757878717A6A6868746C6C66646B747177626B77747466757266203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146103.373:4679): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146103.374:4680): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.528:4681): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146103.528:4682): pid=28021 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.530:4683): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.530:4684): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.541:4685): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.541:4686): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.541:4687): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146103.562:4688): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.562:4689): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.613:4690): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.613:4691): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.614:4692): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146103.664:4693): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146103.664:4694): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726167646166766E79766776797478796F7779796E767A706D7875736B6A6672203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146103.664:4695): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146103.665:4696): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.819:4697): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146103.819:4698): pid=28055 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146103.821:4699): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146103.821:4700): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146103.881:4701): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146103.881:4702): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146103.881:4703): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28062 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146103.931:4704): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146103.931:4705): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68667276686F79786C71667A7565726C7A79726A67687067636E6B6263656D78203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146103.932:4706): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146103.933:4707): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.090:4708): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146104.090:4709): pid=28075 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.092:4710): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146104.092:4711): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146104.120:4712): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146104.120:4713): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146104.121:4714): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146104.171:4715): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146104.171:4716): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A61697863616B6268687A6F616B7A7566756274786C7A7562796E6571657570203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146104.171:4717): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146104.172:4718): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.334:4719): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146104.335:4720): pid=28095 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.337:4721): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146104.337:4722): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146104.363:4723): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146104.363:4724): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146104.364:4725): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146104.415:4726): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146104.415:4727): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6E62786564796D786C626F66777A666F677965626274676B74617A63786B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146104.415:4728): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146104.417:4729): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.575:4730): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146104.575:4731): pid=28114 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.577:4732): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146104.577:4733): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146104.635:4734): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146104.635:4735): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146104.636:4736): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146104.686:4737): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146104.687:4738): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C707A7372697570636C74756669676678726D656564786F6A66647278747067203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146104.687:4739): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146104.688:4740): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.871:4741): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146104.871:4742): pid=28134 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146104.873:4743): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146104.873:4744): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146104.913:4745): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146104.913:4746): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146104.914:4747): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146104.968:4748): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146104.968:4749): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727077717477706C656F766C68636F677A6663756362666F6473627179647672203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146104.969:4750): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146104.970:4751): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.135:4752): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146105.135:4753): pid=28153 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.137:4754): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146105.138:4755): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146105.165:4756): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146105.165:4757): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146105.166:4758): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146105.216:4759): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146105.216:4760): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6366716B646B6E6476677079647569747779746D786664766468707471777672203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146105.217:4761): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146105.218:4762): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.377:4763): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146105.377:4764): pid=28171 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.379:4765): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146105.379:4766): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146105.406:4767): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146105.406:4768): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146105.407:4769): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146105.457:4770): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146105.457:4771): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656772687670717568777062736F68616B70716F756F7A64636C687572656A61203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146105.457:4772): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146105.458:4773): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.619:4774): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146105.619:4775): pid=28189 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.621:4776): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146105.621:4777): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146105.649:4778): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146105.649:4779): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146105.650:4780): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146105.699:4781): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146105.700:4782): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C6967656A6866656B6B7461626365766479666D7171647967717561686E77203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146105.700:4783): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146105.701:4784): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.868:4785): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146105.868:4786): pid=28207 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146105.871:4787): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146105.871:4788): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146105.899:4789): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146105.899:4790): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146105.900:4791): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28212 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146105.950:4792): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146105.951:4793): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777266707762726A726C6E746A62736364687574717A6175696A6E6C766B6166203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146105.951:4794): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146105.952:4795): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146106.129:4796): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146106.129:4797): pid=28225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146106.132:4798): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146106.132:4799): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146106.267:4800): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146106.267:4801): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146106.268:4802): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146106.317:4803): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146106.317:4804): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571657961686F6E6764786F766476717474677A6D616E71736F667275696B6A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146106.318:4805): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146106.319:4806): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146106.465:4807): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146106.465:4808): pid=28245 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146106.467:4809): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146106.467:4810): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146106.710:4811): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146106.710:4812): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146106.711:4813): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28261 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146106.730:4814): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146106.730:4815): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146106.740:4816): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146106.740:4817): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146106.741:4818): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146106.764:4819): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146106.764:4820): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146106.804:4821): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146106.804:4822): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146106.805:4823): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146106.856:4824): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146106.857:4825): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C70696A7466727668746C666C71726D73637376726C6E7361716A71696E62203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146106.857:4826): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146106.858:4827): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.016:4828): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146107.016:4829): pid=28308 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.018:4830): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.018:4831): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.032:4832): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.032:4833): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.033:4834): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.054:4835): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.054:4836): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.064:4837): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.064:4838): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.065:4839): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.085:4840): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.085:4841): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.097:4842): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.097:4843): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.098:4844): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146107.147:4845): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146107.148:4846): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C707870717663706967777773767579637A6D6A717A696D6869647574776B65203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146107.148:4847): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146107.149:4848): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.303:4849): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146107.303:4850): pid=28355 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.305:4851): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.305:4852): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.316:4853): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.316:4854): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.317:4855): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.336:4856): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.336:4857): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.386:4858): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.386:4859): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.387:4860): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28376 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.407:4861): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.407:4862): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.418:4863): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.418:4864): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.419:4865): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.440:4866): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.440:4867): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.535:4868): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.535:4869): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.535:4870): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28410 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146107.584:4871): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146107.585:4872): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756A76686E6870686F64726D64766363696968617A70696F78767274756E6B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146107.585:4873): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146107.586:4874): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.730:4875): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146107.730:4876): pid=28423 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146107.732:4877): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.732:4878): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.746:4879): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.746:4880): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.747:4881): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.768:4882): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.768:4883): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.778:4884): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.778:4885): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.779:4886): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146107.799:4887): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146107.799:4888): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146107.813:4889): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146107.813:4890): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146107.814:4891): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146107.864:4892): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146107.864:4893): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626762777A687669736E79766D696277726B646F767163627A696C776A776276203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146107.865:4894): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146107.867:4895): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.034:4896): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146108.034:4897): pid=28470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.037:4898): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.037:4899): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.049:4900): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.049:4901): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.050:4902): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28474 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.070:4903): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.070:4904): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.125:4905): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.125:4906): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.126:4907): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.144:4908): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.144:4909): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.155:4910): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.155:4911): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.156:4912): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.179:4913): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.179:4914): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.215:4915): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.215:4916): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.216:4917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146108.266:4918): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146108.266:4919): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647468686E74776E6961616A7274687979776E676F69617774726A69736B6270203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146108.267:4920): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146108.268:4921): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.416:4922): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146108.416:4923): pid=28538 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.418:4924): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.418:4925): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.432:4926): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.432:4927): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.432:4928): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28543 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.455:4929): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.455:4930): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.467:4931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.467:4932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.468:4933): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.488:4934): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.488:4935): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.499:4936): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.499:4937): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.500:4938): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28572 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146108.550:4939): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146108.550:4940): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B756561776A736D61666F716778746B767464776D6E656C6B706D7479797A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146108.550:4941): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146108.552:4942): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.713:4943): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146108.714:4944): pid=28585 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146108.716:4945): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.716:4946): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.728:4947): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.728:4948): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.729:4949): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146108.752:4950): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146108.752:4951): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146108.828:4952): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146108.828:4953): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146108.829:4954): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146108.880:4955): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146108.880:4956): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786776647A696967746D6C7468616269756C62616B6166746E647272706F7764203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146108.881:4957): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146108.882:4958): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146109.296:4959): prog-id=157 op=LOAD
type=BPF msg=audit(1739146109.296:4960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.296:4961): prog-id=158 op=LOAD
type=BPF msg=audit(1739146109.296:4962): prog-id=159 op=LOAD
type=BPF msg=audit(1739146109.296:4963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.296:4964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.297:4965): prog-id=160 op=LOAD
type=BPF msg=audit(1739146109.297:4966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.298:4967): prog-id=161 op=LOAD
type=BPF msg=audit(1739146109.298:4968): prog-id=162 op=LOAD
type=BPF msg=audit(1739146109.298:4969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.298:4970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.302:4971): prog-id=163 op=LOAD
type=BPF msg=audit(1739146109.302:4972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.303:4973): prog-id=164 op=LOAD
type=BPF msg=audit(1739146109.303:4974): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.303:4975): prog-id=165 op=LOAD
type=BPF msg=audit(1739146109.303:4976): prog-id=166 op=LOAD
type=BPF msg=audit(1739146109.303:4977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146109.303:4978): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146109.324:4979): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146109.324:4980): pid=28620 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146109.327:4981): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146109.327:4982): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146109.385:4983): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146109.385:4984): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146109.385:4985): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146109.436:4986): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146109.436:4987): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786167736E6F6C626568666F6B72647267787478797A71746F6F61626E6172203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146109.436:4988): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146109.438:4989): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739146109.729:4990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146109.747:4991): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146109.747:4992): pid=28669 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146109.749:4993): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146109.749:4994): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146109.810:4995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146109.810:4996): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146109.811:4997): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28685 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146109.869:4998): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146109.869:4999): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76787A78736B7966786A7067666F73736A65766A72726F747776796A72686766203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146109.869:5000): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146109.871:5001): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739146110.120:5002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1739146110.354:5003): prog-id=167 op=LOAD
type=BPF msg=audit(1739146110.354:5004): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.354:5005): prog-id=168 op=LOAD
type=BPF msg=audit(1739146110.354:5006): prog-id=169 op=LOAD
type=BPF msg=audit(1739146110.354:5007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.354:5008): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.355:5009): prog-id=170 op=LOAD
type=BPF msg=audit(1739146110.355:5010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.356:5011): prog-id=171 op=LOAD
type=BPF msg=audit(1739146110.356:5012): prog-id=172 op=LOAD
type=BPF msg=audit(1739146110.356:5013): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.356:5014): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.360:5015): prog-id=173 op=LOAD
type=BPF msg=audit(1739146110.360:5016): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.361:5017): prog-id=174 op=LOAD
type=BPF msg=audit(1739146110.361:5018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.361:5019): prog-id=175 op=LOAD
type=BPF msg=audit(1739146110.361:5020): prog-id=176 op=LOAD
type=BPF msg=audit(1739146110.361:5021): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146110.361:5022): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146110.383:5023): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146110.383:5024): pid=28698 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146110.385:5025): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146110.385:5026): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146110.471:5027): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146110.471:5028): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146110.472:5029): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146110.521:5030): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146110.521:5031): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656B736F63776A6B776B737966657166707A7171646B75716A706F786D6A69203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146110.521:5032): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146110.523:5033): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739146110.822:5034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739146110.822:5035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739146110.830:5036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146110.852:5037): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146110.852:5038): pid=28749 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146110.855:5039): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146110.855:5040): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1739146110.890:5041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1739146111.817:5042): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146111.817:5043): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146111.818:5044): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146111.869:5045): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146111.870:5046): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76716C6968647064756B786F6B727071676874706D79696B7671777965656470203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146111.870:5047): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146111.871:5048): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.022:5049): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146112.022:5050): pid=28819 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.024:5051): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.024:5052): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.056:5053): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.056:5054): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.057:5055): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28824 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146112.108:5056): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146112.108:5057): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A78646F7476746B7A79726D7A65706E716C65727A72756461716E716F6F64203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146112.109:5058): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146112.110:5059): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.271:5060): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146112.271:5061): pid=28837 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.273:5062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.273:5063): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.301:5064): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.301:5065): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.302:5066): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28841 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146112.354:5067): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146112.354:5068): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7470726A7368626372616E6776656E6E777469766B6C7366776E6379746D6A64203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146112.354:5069): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146112.356:5070): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.524:5071): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146112.524:5072): pid=28854 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.526:5073): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.526:5074): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.684:5075): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.684:5076): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.684:5077): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146112.704:5078): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.704:5079): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.714:5080): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.714:5081): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.715:5082): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28879 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146112.738:5083): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.738:5084): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.773:5085): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.773:5086): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.774:5087): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146112.825:5088): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146112.825:5089): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68637275686F7A6168676F6C6970746E74666A6B6D71647268686A666A676969203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146112.825:5090): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146112.827:5091): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.978:5092): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146112.978:5093): pid=28912 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146112.980:5094): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146112.980:5095): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146112.994:5096): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146112.994:5097): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146112.994:5098): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146113.015:5099): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.015:5100): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.026:5101): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.026:5102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.026:5103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146113.046:5104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.046:5105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.058:5106): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.058:5107): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.059:5108): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146113.109:5109): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146113.110:5110): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C706B7177746A676571676873776963666C706262646A7A706C7766776A6F67203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146113.110:5111): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146113.111:5112): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146113.267:5113): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146113.267:5114): pid=28959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146113.269:5115): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.269:5116): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.281:5117): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.281:5118): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.282:5119): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146113.302:5120): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.302:5121): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.893:5122): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.893:5123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.894:5124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=28992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146113.914:5125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.914:5126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.924:5127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.924:5128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.925:5129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146113.949:5130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146113.949:5131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146113.961:5132): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146113.961:5133): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146113.962:5134): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29026 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146114.014:5135): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146114.014:5136): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736973666177647066647664756C6373656D6A6162626F7A6C73686A76756569203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146114.014:5137): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146114.016:5138): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.377:5139): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146114.378:5140): pid=29039 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.380:5141): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146114.380:5142): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146114.391:5143): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146114.391:5144): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146114.392:5145): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146114.412:5146): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146114.412:5147): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146114.465:5148): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146114.465:5149): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146114.466:5150): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146114.519:5151): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146114.519:5152): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696D706E7663706661666D70706179726671697670746C77716B71686A707A66203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146114.520:5153): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146114.521:5154): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.714:5155): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146114.714:5156): pid=29073 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.716:5157): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146114.716:5158): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146114.771:5159): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146114.771:5160): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146114.772:5161): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146114.823:5162): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146114.823:5163): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F756D7168706A6D617571616C646B66747A69796F766F6E74786F616D62746B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146114.823:5164): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146114.825:5165): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.983:5166): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146114.984:5167): pid=29099 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146114.986:5168): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146114.986:5169): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146115.077:5170): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146115.077:5171): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146115.078:5172): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146115.129:5173): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146115.129:5174): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B717A6E78766E756870616E656F67647A6479767A626B7277746C65797A63203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146115.129:5175): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146115.130:5176): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146115.329:5177): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146115.329:5178): pid=29120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146115.330:5179): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146115.330:5180): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146115.490:5181): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146115.490:5182): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146115.490:5183): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29138 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146115.540:5184): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146115.540:5185): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726577656F61797170696677777562756461676C757972667676746D657A6366203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146115.541:5186): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146115.542:5187): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146115.708:5188): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146115.708:5189): pid=29151 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146115.711:5190): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146115.711:5191): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.169:5192): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.169:5193): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.170:5194): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146116.189:5195): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.189:5196): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.199:5197): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.199:5198): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.200:5199): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29187 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146116.222:5200): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.222:5201): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.441:5202): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.441:5203): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.442:5204): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146116.491:5205): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146116.492:5206): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E676175756275736B7561647A616A76636C6D697379787667657079727069203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146116.492:5207): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146116.493:5208): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146116.640:5209): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146116.641:5210): pid=29220 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146116.643:5211): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.643:5212): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.656:5213): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.656:5214): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.657:5215): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146116.678:5216): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.678:5217): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.689:5218): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.689:5219): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.690:5220): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146116.709:5221): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.709:5222): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.721:5223): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.721:5224): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.722:5225): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146116.775:5226): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146116.775:5227): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D656D67756B7872656F79627470776B626E7A726C6B706A74736F766B767065203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146116.776:5228): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146116.777:5229): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146116.933:5230): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146116.933:5231): pid=29267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146116.935:5232): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.935:5233): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146116.946:5234): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146116.946:5235): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146116.946:5236): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146116.966:5237): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146116.966:5238): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146117.474:5239): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146117.474:5240): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146117.475:5241): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146117.524:5242): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146117.524:5243): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146117.525:5244): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146117.526:5245): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1739146119.425:5246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739146119.425:5247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739146119.597:5248): prog-id=177 op=LOAD
type=BPF msg=audit(1739146119.597:5249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.597:5250): prog-id=178 op=LOAD
type=BPF msg=audit(1739146119.597:5251): prog-id=179 op=LOAD
type=BPF msg=audit(1739146119.597:5252): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.597:5253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.598:5254): prog-id=180 op=LOAD
type=BPF msg=audit(1739146119.598:5255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.599:5256): prog-id=181 op=LOAD
type=BPF msg=audit(1739146119.599:5257): prog-id=182 op=LOAD
type=BPF msg=audit(1739146119.599:5258): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.599:5259): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.603:5260): prog-id=183 op=LOAD
type=BPF msg=audit(1739146119.603:5261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.605:5262): prog-id=184 op=LOAD
type=BPF msg=audit(1739146119.605:5263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.605:5264): prog-id=185 op=LOAD
type=BPF msg=audit(1739146119.605:5265): prog-id=186 op=LOAD
type=BPF msg=audit(1739146119.605:5266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146119.605:5267): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1739146119.618:5268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739146119.730:5269): table=mangle:2 family=2 entries=2 op=nft_register_chain pid=29455 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.730:5269): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffa31897d0 a2=0 a3=7fffa31897bc items=0 ppid=29443 pid=29455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.730:5269): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1739146119.732:5270): table=filter:3 family=2 entries=2 op=nft_register_chain pid=29460 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.732:5270): arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffd1167c800 a2=0 a3=7ffd1167c7ec items=0 ppid=29443 pid=29460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.732:5270): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146119.734:5271): table=filter:4 family=2 entries=2 op=nft_register_chain pid=29462 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.734:5271): arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffc0490b020 a2=0 a3=7ffc0490b00c items=0 ppid=29443 pid=29462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.734:5271): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146119.762:5272): table=filter:5 family=2 entries=2 op=nft_register_chain pid=29468 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.762:5272): arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7fff2717fd00 a2=0 a3=7fff2717fcec items=0 ppid=29443 pid=29468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.762:5272): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146119.785:5273): table=filter:6 family=2 entries=1 op=nft_register_rule pid=29473 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.785:5273): arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffee379bb90 a2=0 a3=7ffee379bb7c items=0 ppid=29443 pid=29473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.785:5273): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1739146119.786:5274): table=mangle:7 family=10 entries=2 op=nft_register_chain pid=29474 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1739146119.786:5274): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc52a421d0 a2=0 a3=7ffc52a421bc items=0 ppid=29443 pid=29474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.786:5274): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1739146119.786:5275): table=mangle:8 family=2 entries=1 op=nft_register_chain pid=29475 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.786:5275): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1e08ce20 a2=0 a3=7ffe1e08ce0c items=0 ppid=29443 pid=29475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.786:5275): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1739146119.787:5276): table=mangle:9 family=10 entries=1 op=nft_register_chain pid=29476 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1739146119.787:5276): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7629f1e0 a2=0 a3=7ffd7629f1cc items=0 ppid=29443 pid=29476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.787:5276): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1739146119.788:5277): table=nat:10 family=2 entries=2 op=nft_register_chain pid=29477 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.788:5277): arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd7f4ec760 a2=0 a3=7ffd7f4ec74c items=0 ppid=29443 pid=29477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.788:5277): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1739146119.788:5278): table=nat:11 family=10 entries=2 op=nft_register_chain pid=29478 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1739146119.788:5278): arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc17f14c90 a2=0 a3=7ffc17f14c7c items=0 ppid=29443 pid=29478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.788:5278): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1739146119.789:5279): table=filter:12 family=2 entries=1 op=nft_register_chain pid=29479 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1739146119.789:5279): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffefcd3e650 a2=0 a3=7ffefcd3e63c items=0 ppid=29443 pid=29479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.789:5279): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146119.790:5280): table=filter:13 family=10 entries=2 op=nft_register_chain pid=29480 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1739146119.790:5280): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc7662ebe0 a2=0 a3=7ffc7662ebcc items=0 ppid=29443 pid=29480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146119.790:5280): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=BPF msg=audit(1739146120.665:5281): prog-id=187 op=LOAD
type=BPF msg=audit(1739146120.666:5282): prog-id=188 op=LOAD
type=SYSCALL msg=audit(1739146120.666:5282): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000024830 items=0 ppid=29502 pid=29535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.666:5282): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316637646162653934336632303531396539623437623138
type=BPF msg=audit(1739146120.666:5283): prog-id=189 op=LOAD
type=SYSCALL msg=audit(1739146120.666:5283): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000024878 items=0 ppid=29502 pid=29535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.666:5283): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316637646162653934336632303531396539623437623138
type=BPF msg=audit(1739146120.666:5284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.666:5285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.666:5286): prog-id=190 op=LOAD
type=SYSCALL msg=audit(1739146120.666:5286): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000024cd8 items=0 ppid=29502 pid=29535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.666:5286): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30316637646162653934336632303531396539623437623138
type=BPF msg=audit(1739146120.667:5287): prog-id=191 op=LOAD
type=BPF msg=audit(1739146120.668:5288): prog-id=192 op=LOAD
type=SYSCALL msg=audit(1739146120.668:5288): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c00028b2e0 items=0 ppid=29523 pid=29544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.668:5288): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303032626532376633336466323637343030346138663339
type=BPF msg=audit(1739146120.668:5289): prog-id=193 op=LOAD
type=SYSCALL msg=audit(1739146120.668:5289): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c00028b328 items=0 ppid=29523 pid=29544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.668:5289): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303032626532376633336466323637343030346138663339
type=BPF msg=audit(1739146120.668:5290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.668:5291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.668:5292): prog-id=194 op=LOAD
type=SYSCALL msg=audit(1739146120.668:5292): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c00028b788 items=0 ppid=29523 pid=29544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.668:5292): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303032626532376633336466323637343030346138663339
type=BPF msg=audit(1739146120.669:5293): prog-id=195 op=LOAD
type=BPF msg=audit(1739146120.669:5294): prog-id=196 op=LOAD
type=SYSCALL msg=audit(1739146120.669:5294): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d1360 items=0 ppid=29515 pid=29543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.669:5294): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363832323638656234373938373835623636313461373663
type=BPF msg=audit(1739146120.669:5295): prog-id=197 op=LOAD
type=SYSCALL msg=audit(1739146120.669:5295): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d13a8 items=0 ppid=29515 pid=29543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.669:5295): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363832323638656234373938373835623636313461373663
type=BPF msg=audit(1739146120.669:5296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.669:5297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.669:5298): prog-id=198 op=LOAD
type=SYSCALL msg=audit(1739146120.669:5298): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d1808 items=0 ppid=29515 pid=29543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.669:5298): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363832323638656234373938373835623636313461373663
type=BPF msg=audit(1739146120.799:5299): prog-id=199 op=LOAD
type=BPF msg=audit(1739146120.800:5300): prog-id=200 op=LOAD
type=SYSCALL msg=audit(1739146120.800:5300): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c0001e3cc0 items=0 ppid=29627 pid=29651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.800:5300): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633564666364336364643535313039353331656239303034
type=BPF msg=audit(1739146120.800:5301): prog-id=201 op=LOAD
type=SYSCALL msg=audit(1739146120.800:5301): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0001e3d08 items=0 ppid=29627 pid=29651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.800:5301): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633564666364336364643535313039353331656239303034
type=BPF msg=audit(1739146120.801:5302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.801:5303): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.801:5304): prog-id=202 op=LOAD
type=SYSCALL msg=audit(1739146120.801:5304): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c00039a168 items=0 ppid=29627 pid=29651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.801:5304): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633564666364336364643535313039353331656239303034
type=BPF msg=audit(1739146120.805:5305): prog-id=203 op=LOAD
type=BPF msg=audit(1739146120.806:5306): prog-id=204 op=LOAD
type=SYSCALL msg=audit(1739146120.806:5306): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000214840 items=0 ppid=29635 pid=29675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.806:5306): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613132386561663666663962663637366432653961313364
type=BPF msg=audit(1739146120.806:5307): prog-id=205 op=LOAD
type=SYSCALL msg=audit(1739146120.806:5307): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000214888 items=0 ppid=29635 pid=29675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.806:5307): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613132386561663666663962663637366432653961313364
type=BPF msg=audit(1739146120.806:5308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.806:5309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.806:5310): prog-id=206 op=LOAD
type=SYSCALL msg=audit(1739146120.806:5310): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000214ce8 items=0 ppid=29635 pid=29675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.806:5310): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613132386561663666663962663637366432653961313364
type=BPF msg=audit(1739146120.809:5311): prog-id=207 op=LOAD
type=BPF msg=audit(1739146120.809:5312): prog-id=208 op=LOAD
type=SYSCALL msg=audit(1739146120.809:5312): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c000309110 items=0 ppid=29652 pid=29674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.809:5312): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31336165333361343164373930313161636432613766626264
type=BPF msg=audit(1739146120.810:5313): prog-id=209 op=LOAD
type=SYSCALL msg=audit(1739146120.810:5313): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000309158 items=0 ppid=29652 pid=29674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.810:5313): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31336165333361343164373930313161636432613766626264
type=BPF msg=audit(1739146120.810:5314): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.810:5315): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146120.810:5316): prog-id=210 op=LOAD
type=SYSCALL msg=audit(1739146120.810:5316): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c0003095b8 items=0 ppid=29652 pid=29674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146120.810:5316): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31336165333361343164373930313161636432613766626264
type=BPF msg=audit(1739146125.403:5317): prog-id=211 op=LOAD
type=BPF msg=audit(1739146125.403:5318): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.403:5319): prog-id=212 op=LOAD
type=BPF msg=audit(1739146125.403:5320): prog-id=213 op=LOAD
type=BPF msg=audit(1739146125.403:5321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.403:5322): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.404:5323): prog-id=214 op=LOAD
type=BPF msg=audit(1739146125.404:5324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.405:5325): prog-id=215 op=LOAD
type=BPF msg=audit(1739146125.405:5326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.406:5327): prog-id=216 op=LOAD
type=BPF msg=audit(1739146125.406:5328): prog-id=217 op=LOAD
type=BPF msg=audit(1739146125.406:5329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.406:5330): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.406:5331): prog-id=218 op=LOAD
type=BPF msg=audit(1739146125.406:5332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.408:5333): prog-id=219 op=LOAD
type=BPF msg=audit(1739146125.408:5334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.409:5335): prog-id=220 op=LOAD
type=BPF msg=audit(1739146125.409:5336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.411:5337): prog-id=221 op=LOAD
type=BPF msg=audit(1739146125.411:5338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.412:5339): prog-id=222 op=LOAD
type=BPF msg=audit(1739146125.412:5340): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.413:5341): prog-id=223 op=LOAD
type=BPF msg=audit(1739146125.413:5342): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.413:5343): prog-id=224 op=LOAD
type=BPF msg=audit(1739146125.413:5344): prog-id=225 op=LOAD
type=BPF msg=audit(1739146125.413:5345): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.413:5346): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146125.414:5347): prog-id=226 op=LOAD
type=BPF msg=audit(1739146125.414:5348): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1739146125.440:5349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739146125.454:5350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146125.509:5351): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146125.509:5352): pid=29321 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146125.513:5353): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146125.513:5354): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146126.243:5355): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146126.243:5356): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146126.243:5357): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146126.296:5358): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146126.296:5359): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677568617575616770657875687A64786870626566716A767578657076656475203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146126.297:5360): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146126.299:5361): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146126.503:5362): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146126.504:5363): pid=29845 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146126.506:5364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146126.506:5365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146126.745:5366): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146126.745:5367): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146126.746:5368): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146126.796:5369): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146126.796:5370): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6A7762716864637A6465726A61726C646878786D71737879627065617A6F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146126.797:5371): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146126.798:5372): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146127.038:5373): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146127.038:5374): pid=29877 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146127.040:5375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146127.040:5376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146127.454:5377): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146127.454:5378): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146127.454:5379): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29895 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146127.504:5380): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146127.504:5381): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756561776D6D72636471766B6571777372766666626B6464797A616268786E61203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146127.504:5382): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146127.505:5383): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146127.666:5384): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146127.666:5385): pid=29908 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146127.668:5386): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146127.668:5387): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146127.867:5388): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146127.867:5389): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146127.868:5390): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29922 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146127.918:5391): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146127.918:5392): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76676C6E70737A706F6B7465636C727265646B63707461627778717771696768203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146127.918:5393): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146127.919:5394): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.138:5395): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146128.138:5396): pid=29935 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.139:5397): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146128.139:5398): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146128.311:5399): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146128.311:5400): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146128.312:5401): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146128.361:5402): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146128.361:5403): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B6E71796A70616374737164707A6264627065617A656B6F757A6E6B676974203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146128.361:5404): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146128.363:5405): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.522:5406): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146128.522:5407): pid=29964 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.524:5408): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146128.524:5409): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146128.579:5410): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146128.579:5411): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146128.580:5412): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146128.630:5413): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146128.630:5414): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616567716E6A697562726C656B686F646467717A6A666C6E6D7A6964786E7669203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146128.630:5415): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146128.631:5416): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.796:5417): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146128.796:5418): pid=29984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146128.798:5419): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146128.798:5420): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146128.852:5421): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146128.852:5422): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146128.853:5423): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=29990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146128.903:5424): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146128.903:5425): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6370786363636C61776774646A61746E67746977757576726D686563686E6374203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146128.903:5426): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146128.904:5427): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.073:5428): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146129.074:5429): pid=30003 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.076:5430): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146129.076:5431): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146129.131:5432): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146129.131:5433): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146129.132:5434): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146129.183:5435): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146129.183:5436): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B6A696571656A79726E7A76776479777264716B696C616E6269727278616C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146129.183:5437): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146129.184:5438): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.346:5439): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146129.346:5440): pid=30022 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.348:5441): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146129.348:5442): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146129.454:5443): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146129.454:5444): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146129.455:5445): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146129.504:5446): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146129.504:5447): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A6C657969716D6D64756F6F636576676D79766D637763696B6470786E7761203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146129.505:5448): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146129.506:5449): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.657:5450): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146129.657:5451): pid=30044 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.660:5452): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146129.660:5453): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146129.716:5454): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146129.716:5455): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146129.717:5456): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146129.767:5457): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146129.767:5458): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A786D686D776A746B7176736C6C676C636E6A71747762646165786B6E6A79203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146129.767:5459): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146129.768:5460): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.926:5461): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146129.926:5462): pid=30063 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146129.928:5463): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146129.928:5464): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146129.983:5465): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146129.983:5466): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146129.984:5467): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146130.003:5468): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.003:5469): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.013:5470): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.013:5471): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.014:5472): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30083 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146130.038:5473): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.038:5474): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.071:5475): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.071:5476): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.072:5477): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30103 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146130.122:5478): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146130.122:5479): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72726B786B7474676D73656F70776161756C6A67736B7A726170626C73657165203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146130.122:5480): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146130.124:5481): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146130.272:5482): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146130.272:5483): pid=30116 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146130.274:5484): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.274:5485): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.288:5486): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.288:5487): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.289:5488): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146130.311:5489): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.311:5490): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.322:5491): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.322:5492): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.323:5493): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146130.343:5494): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.343:5495): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.354:5496): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.354:5497): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.355:5498): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30150 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146130.407:5499): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146130.407:5500): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C676E6D6B6E7474696D73776868716577676B7A646B6377746A676B697070203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146130.408:5501): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146130.409:5502): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146130.586:5503): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146130.586:5504): pid=30163 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146130.588:5505): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.588:5506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.599:5507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.599:5508): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.600:5509): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30167 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146130.620:5510): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146130.620:5511): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146130.790:5512): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146130.790:5513): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146130.791:5514): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146130.842:5515): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146130.842:5516): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B76646E6E6D756A7469756F74786F62717468757063617A6878616F64736A65203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146130.842:5517): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146130.844:5518): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.001:5519): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146131.001:5520): pid=30203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.003:5521): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.003:5522): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.068:5523): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.068:5524): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.069:5525): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146131.088:5526): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.088:5527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.099:5528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.099:5529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.100:5530): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146131.123:5531): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.123:5532): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.136:5533): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.136:5534): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.136:5535): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146131.186:5536): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146131.186:5537): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707167646B676A6D667971777566767973797A736A726F76676D796B6E636367203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146131.187:5538): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146131.188:5539): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.348:5540): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146131.348:5541): pid=30256 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.350:5542): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.350:5543): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.361:5544): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.361:5545): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.362:5546): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146131.382:5547): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.382:5548): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.467:5549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.467:5550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.468:5551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146131.517:5552): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146131.517:5553): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A6473676D6A6872756B696F7572647466717A6A6D61767071687561766272203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146131.518:5554): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146131.519:5555): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.678:5556): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146131.679:5557): pid=30292 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146131.681:5558): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.681:5559): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.944:5560): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.944:5561): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.945:5562): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146131.963:5563): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.963:5564): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146131.974:5565): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146131.974:5566): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146131.975:5567): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146131.997:5568): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146131.997:5569): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.009:5570): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.009:5571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.010:5572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146132.060:5573): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146132.060:5574): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A7A737373686F617A64787567646975717A7079746E6F6666616C73796B74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146132.061:5575): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146132.062:5576): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146132.374:5577): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146132.374:5578): pid=30357 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146132.376:5579): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.376:5580): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.387:5581): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.387:5582): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.388:5583): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146132.408:5584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.408:5585): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.466:5586): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.466:5587): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.467:5588): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146132.486:5589): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.486:5590): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.497:5591): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.497:5592): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.498:5593): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146132.520:5594): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.520:5595): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.536:5596): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.536:5597): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.537:5598): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146132.587:5599): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146132.587:5600): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6671766F6F6370716863787674777373777278636B7A6872796C76746D746E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146132.587:5601): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146132.589:5602): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146132.736:5603): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146132.736:5604): pid=30425 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146132.738:5605): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.738:5606): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.753:5607): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.753:5608): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.754:5609): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30430 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146132.776:5610): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.776:5611): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.787:5612): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.787:5613): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.788:5614): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146132.809:5615): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146132.809:5616): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146132.821:5617): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146132.821:5618): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146132.822:5619): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30459 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146132.873:5620): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146132.873:5621): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669756178616174616668636E687171647771786C726E66756F797165616361203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146132.873:5622): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146132.875:5623): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146133.026:5624): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146133.027:5625): pid=30472 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146133.029:5626): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146133.029:5627): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146133.041:5628): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146133.041:5629): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146133.042:5630): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146133.062:5631): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146133.062:5632): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146133.303:5633): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146133.303:5634): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146133.304:5635): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146133.356:5636): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146133.356:5637): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75637366747267707372726F6D67766962736378736F79716F616F6F6B6A6B72203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146133.356:5638): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146133.358:5639): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.011:5640): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146134.011:5641): pid=30506 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.014:5642): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146134.014:5643): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146134.078:5644): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146134.078:5645): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146134.079:5646): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30519 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146134.128:5647): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146134.128:5648): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79626E646863656D6F7765717465716B796E6F797772786C7279636768776E69203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146134.129:5649): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146134.130:5650): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.340:5651): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146134.340:5652): pid=30532 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.342:5653): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146134.342:5654): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146134.402:5655): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146134.402:5656): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146134.402:5657): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146134.454:5658): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146134.454:5659): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62777270777A6F6373666D7664696A6668766C6A786E67787567697969686A6D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146134.454:5660): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146134.455:5661): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.672:5662): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146134.673:5663): pid=30557 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146134.675:5664): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146134.675:5665): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146134.778:5666): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146134.778:5667): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146134.779:5668): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30571 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146134.799:5669): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146134.799:5670): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146134.810:5671): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146134.810:5672): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146134.811:5673): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146134.835:5674): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146134.835:5675): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146134.848:5676): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146134.848:5677): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146134.849:5678): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146134.900:5679): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146134.900:5680): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73736E7A65706A756674636D6C6A7267766A6A64616E6C7A6868766D756F6265203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146134.900:5681): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146134.902:5682): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.058:5683): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146135.058:5684): pid=30618 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.060:5685): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.061:5686): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.075:5687): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.075:5688): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.075:5689): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146135.098:5690): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.098:5691): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.109:5692): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.109:5693): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.110:5694): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146135.130:5695): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.130:5696): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.141:5697): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.141:5698): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.142:5699): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30652 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146135.191:5700): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146135.192:5701): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A6673666B6B737A786F72636B736E63706F74647076726B7173656F746E6D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146135.192:5702): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146135.193:5703): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.351:5704): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146135.351:5705): pid=30665 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.354:5706): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.354:5707): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.364:5708): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.364:5709): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.365:5710): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146135.384:5711): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.384:5712): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.442:5713): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.442:5714): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.443:5715): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30686 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146135.496:5716): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146135.497:5717): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A65786E6279667162637368767172636679736465696A726C646572676E6B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146135.497:5718): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146135.498:5719): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.767:5720): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146135.767:5721): pid=30699 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146135.769:5722): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146135.769:5723): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146135.858:5724): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146135.858:5725): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146135.859:5726): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146135.910:5727): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146135.910:5728): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66756967706B74736D6E6E636E6875736B7973637671706D616E636E70666573203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146135.911:5729): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146135.912:5730): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146136.348:5731): prog-id=227 op=LOAD
type=BPF msg=audit(1739146136.348:5732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.350:5733): prog-id=228 op=LOAD
type=BPF msg=audit(1739146136.350:5734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.350:5735): prog-id=229 op=LOAD
type=BPF msg=audit(1739146136.350:5736): prog-id=230 op=LOAD
type=BPF msg=audit(1739146136.350:5737): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.350:5738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.352:5739): prog-id=231 op=LOAD
type=BPF msg=audit(1739146136.352:5740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.353:5741): prog-id=232 op=LOAD
type=BPF msg=audit(1739146136.353:5742): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.355:5743): prog-id=233 op=LOAD
type=BPF msg=audit(1739146136.355:5744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.356:5745): prog-id=234 op=LOAD
type=BPF msg=audit(1739146136.356:5746): prog-id=235 op=LOAD
type=BPF msg=audit(1739146136.356:5747): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.356:5748): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.357:5749): prog-id=236 op=LOAD
type=BPF msg=audit(1739146136.357:5750): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.358:5751): prog-id=237 op=LOAD
type=BPF msg=audit(1739146136.358:5752): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.359:5753): prog-id=238 op=LOAD
type=BPF msg=audit(1739146136.359:5754): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.359:5755): prog-id=239 op=LOAD
type=BPF msg=audit(1739146136.359:5756): prog-id=240 op=LOAD
type=BPF msg=audit(1739146136.359:5757): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.359:5758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.359:5759): prog-id=241 op=LOAD
type=BPF msg=audit(1739146136.360:5760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146136.361:5761): prog-id=242 op=LOAD
type=BPF msg=audit(1739146136.361:5762): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146136.381:5763): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146136.381:5764): pid=30724 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146136.384:5765): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146136.384:5766): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146136.532:5767): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146136.532:5768): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146136.533:5769): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146136.586:5770): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146136.587:5771): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B61797A6B63666D787268696B627777626D717A63717561737473716C666F78203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146136.587:5772): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146136.588:5773): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1739146136.886:5774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739146136.896:5775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1739146136.914:5776): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146136.914:5777): pid=30773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146136.916:5778): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146136.916:5779): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146136.977:5780): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146136.977:5781): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146136.978:5782): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146137.038:5783): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146137.038:5784): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E64726E6C7A6278676970787A66777A677370776A6E726567756E6C7366736C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146137.039:5785): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146137.042:5786): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146137.258:5787): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146137.258:5788): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146137.307:5789): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146137.308:5790): pid=30815 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146137.310:5791): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146137.310:5792): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146137.396:5793): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146137.396:5794): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146137.397:5795): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30873 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146137.446:5796): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146137.446:5797): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A676E706171777461617A6E63666F7A65736E716E6C716364656C70697172203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146137.447:5798): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146137.448:5799): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146137.651:5800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146137.651:5801): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1739146137.691:5802): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146137.691:5803): pid=30886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146137.694:5804): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146137.694:5805): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146137.779:5806): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146137.779:5807): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146137.780:5808): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146137.799:5809): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146137.799:5810): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146137.809:5811): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146137.809:5812): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146137.810:5813): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146137.834:5814): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146137.834:5815): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146137.847:5816): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146137.848:5817): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146137.848:5818): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=30971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146137.898:5819): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146137.899:5820): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63656A637478616A79636D70637275726C74776D7A726675797A6D656B646874203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146137.899:5821): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146137.901:5822): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146138.141:5823): prog-id=243 op=LOAD
type=BPF msg=audit(1739146138.142:5824): prog-id=244 op=LOAD
type=SYSCALL msg=audit(1739146138.142:5824): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001939a0 items=0 ppid=30993 pid=31002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.142:5824): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623932653433376338316166396235613461613334653036
type=BPF msg=audit(1739146138.142:5825): prog-id=245 op=LOAD
type=SYSCALL msg=audit(1739146138.142:5825): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001939e8 items=0 ppid=30993 pid=31002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.142:5825): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623932653433376338316166396235613461613334653036
type=BPF msg=audit(1739146138.142:5826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146138.142:5827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146138.142:5828): prog-id=246 op=LOAD
type=SYSCALL msg=audit(1739146138.142:5828): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000193e48 items=0 ppid=30993 pid=31002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.142:5828): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623932653433376338316166396235613461613334653036
type=BPF msg=audit(1739146138.144:5829): prog-id=247 op=LOAD
type=BPF msg=audit(1739146138.144:5830): prog-id=248 op=LOAD
type=SYSCALL msg=audit(1739146138.144:5830): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c000216560 items=0 ppid=31021 pid=31030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.144:5830): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66323231326136613635663361326263383134636331343431
type=BPF msg=audit(1739146138.144:5831): prog-id=249 op=LOAD
type=SYSCALL msg=audit(1739146138.144:5831): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c0002165a8 items=0 ppid=31021 pid=31030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.144:5831): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66323231326136613635663361326263383134636331343431
type=BPF msg=audit(1739146138.144:5832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146138.144:5833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146138.144:5834): prog-id=250 op=LOAD
type=SYSCALL msg=audit(1739146138.144:5834): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000216a08 items=0 ppid=31021 pid=31030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146138.144:5834): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66323231326136613635663361326263383134636331343431
type=USER_END msg=audit(1739146138.201:5835): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146138.201:5836): pid=30984 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146138.203:5837): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146138.203:5838): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146138.214:5839): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146138.214:5840): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146138.214:5841): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146138.234:5842): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146138.235:5843): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.255:5844): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.255:5845): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.256:5846): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146139.275:5847): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.276:5848): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.286:5849): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.286:5850): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.287:5851): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31116 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146139.310:5852): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.310:5853): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.325:5854): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.325:5855): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.327:5856): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146139.376:5857): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146139.376:5858): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A6467696565626664646E74736779756275697370746E636D7A616878696C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146139.377:5859): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146139.378:5860): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146139.672:5861): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146139.672:5862): pid=31149 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146139.674:5863): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.674:5864): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.685:5865): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.685:5866): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.686:5867): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146139.706:5868): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.706:5869): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.763:5870): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.763:5871): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.764:5872): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146139.783:5873): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.783:5874): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.793:5875): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.793:5876): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.794:5877): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146139.817:5878): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146139.817:5879): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146139.829:5880): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146139.829:5881): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146139.830:5882): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146139.881:5883): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146139.881:5884): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67736A726F7575766D697069757369746D6F7677676F737761706C6868756977203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146139.882:5885): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146139.883:5886): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146140.184:5887): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146140.184:5888): pid=31216 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146140.186:5889): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.186:5890): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146140.199:5891): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146140.199:5892): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146140.200:5893): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146140.221:5894): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.222:5895): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146140.308:5896): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146140.308:5897): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146140.309:5898): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146140.327:5899): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.327:5900): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146140.337:5901): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146140.337:5902): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146140.338:5903): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146140.361:5904): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.361:5905): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146140.374:5906): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146140.374:5907): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146140.374:5908): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146140.424:5909): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146140.424:5910): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D6A6B62736A6D6E6762727569646C67706765796D77676271716572786F62203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146140.425:5911): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146140.427:5912): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146140.724:5913): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146140.724:5914): pid=31284 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146140.726:5915): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.726:5916): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146140.737:5917): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146140.738:5918): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146140.738:5919): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146140.760:5920): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146140.760:5921): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146141.248:5922): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146141.248:5923): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146141.249:5924): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146141.299:5925): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146141.300:5926): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66727A7770726376676D7873716175706A746E79756470706872716177796D61203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146141.300:5927): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146141.301:5928): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146141.451:5929): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146141.451:5930): pid=31333 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146141.453:5931): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146141.453:5932): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146141.525:5933): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146141.525:5934): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146141.526:5935): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146141.581:5936): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146141.581:5937): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E6362706B766C796D676C716867616B76686F78736977677964637A6C7161203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146141.582:5938): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146141.583:5939): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146141.733:5940): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146141.733:5941): pid=31352 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146141.735:5942): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146141.735:5943): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146141.811:5944): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146141.811:5945): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146141.812:5946): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146141.864:5947): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146141.865:5948): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7269736C6C6E6274797A687774696F72676E7563696F697361636B7A6A786F203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146141.865:5949): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146141.866:5950): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146142.067:5951): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146142.067:5952): pid=31371 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146142.070:5953): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146142.070:5954): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146142.542:5955): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146142.542:5956): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146142.542:5957): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146142.594:5958): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146142.594:5959): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7462617177656A6A6562786F786B686B78626C6862627968707A65706D6372203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146142.594:5960): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146142.596:5961): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146142.943:5962): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146142.943:5963): pid=31415 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146142.945:5964): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146142.945:5965): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146143.055:5966): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146143.055:5967): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146143.056:5968): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146143.107:5969): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146143.107:5970): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7277637A686E707965626764697466656C696B70676E6C6B6F7A71726169657A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146143.108:5971): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146143.109:5972): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146143.275:5973): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146143.275:5974): pid=31451 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146143.277:5975): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146143.277:5976): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146143.387:5977): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146143.387:5978): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146143.387:5979): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146143.437:5980): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146143.437:5981): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667062646A78747971696B706E6D7173636B6D6A7A706E6D797464766E617972203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146143.438:5982): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146143.439:5983): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146143.665:5984): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146143.665:5985): pid=31470 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146143.667:5986): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146143.667:5987): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146143.787:5988): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146143.787:5989): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146143.788:5990): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146143.808:5991): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146143.808:5992): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146143.819:5993): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146143.819:5994): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146143.819:5995): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31498 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146143.843:5996): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146143.843:5997): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146143.856:5998): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146143.856:5999): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146143.857:6000): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146143.909:6001): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146143.909:6002): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F756B62777A6E66796972616268616D6E6C7961756165786861726C6F796564203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146143.910:6003): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146143.911:6004): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146144.210:6005): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146144.210:6006): pid=31531 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146144.212:6007): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146144.212:6008): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146144.223:6009): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146144.223:6010): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146144.224:6011): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146144.244:6012): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146144.244:6013): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146144.635:6014): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146144.635:6015): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146144.636:6016): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146144.686:6017): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146144.686:6018): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6371796B616C7874727776626F67616C66676C7161777A6D6A6765647269797A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146144.687:6019): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146144.688:6020): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146144.845:6021): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146144.846:6022): pid=31579 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146144.848:6023): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146144.848:6024): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146145.253:6025): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146145.253:6026): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146145.254:6027): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146145.274:6028): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146145.274:6029): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146145.285:6030): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146145.285:6031): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146145.286:6032): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146145.309:6033): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146145.309:6034): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146145.323:6035): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146145.323:6036): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146145.324:6037): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146145.376:6038): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146145.377:6039): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63696A776F656D6F6A6B66706E6C6E69756A62786D6C626876646E6563767876203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146145.377:6040): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146145.379:6041): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146145.550:6042): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146145.551:6043): pid=31632 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146145.553:6044): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146145.553:6045): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146145.567:6046): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146145.567:6047): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146145.568:6048): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146145.619:6049): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146145.619:6050): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B746A6164796C6E61626C736C6A6D6373756E6A7271657273747069796E61203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146145.620:6051): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146145.621:6052): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146148.094:6053): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146148.094:6054): pid=31651 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146148.097:6055): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146148.097:6056): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146148.108:6057): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146148.108:6058): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146148.109:6059): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146148.129:6060): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146148.129:6061): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146151.352:6062): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146151.352:6063): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146151.353:6064): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146151.409:6065): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146151.409:6066): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73656167736B6A697268766174746C6877716778686F7277796A677372616D74203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146151.409:6067): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146151.411:6068): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146151.576:6069): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146151.576:6070): pid=31863 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146151.579:6071): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146151.579:6072): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146151.645:6073): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146151.645:6074): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146151.646:6075): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146151.695:6076): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146151.695:6077): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B726A77757674617173746662796F6E726A6D786679776778696277646B7A6D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146151.696:6078): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146151.697:6079): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146151.918:6080): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146151.919:6081): pid=31882 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146151.921:6082): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146151.921:6083): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146151.992:6084): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146151.992:6085): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146151.993:6086): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=31894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146152.045:6087): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146152.045:6088): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74677261726F63656F666D717162786172686164656A7A637976626478677262203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146152.045:6089): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146152.046:6090): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146152.266:6091): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146152.266:6092): pid=31907 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146152.268:6093): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146152.269:6094): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146155.827:6095): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146155.827:6096): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146155.828:6097): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146155.848:6098): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146155.848:6099): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146155.861:6100): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146155.861:6101): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146155.861:6102): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146155.885:6103): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146155.885:6104): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146155.898:6105): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146155.898:6106): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146155.899:6107): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146155.951:6108): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146155.951:6109): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579767373637764667564676462637A6D766D766E667078766A766568667064203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146155.952:6110): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146155.953:6111): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.253:6112): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146156.253:6113): pid=32117 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.255:6114): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.255:6115): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.267:6116): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.267:6117): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.268:6118): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.288:6119): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.288:6120): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.362:6121): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.362:6122): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.363:6123): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32138 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.382:6124): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.382:6125): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.392:6126): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.392:6127): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.392:6128): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32152 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.415:6129): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.415:6130): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.432:6131): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.432:6132): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.432:6133): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146156.482:6134): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146156.483:6135): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66696D77676463657A69666B716F7875626B6D746A6B6369686F786769747271203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146156.483:6136): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146156.484:6137): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.629:6138): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146156.629:6139): pid=32185 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.631:6140): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.631:6141): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.645:6142): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.645:6143): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.646:6144): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.667:6145): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.667:6146): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.679:6147): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.679:6148): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.679:6149): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.701:6150): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.701:6151): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.712:6152): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.712:6153): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.713:6154): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146156.763:6155): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146156.763:6156): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717572626A676472796B6B6D7A756C686C687979686B72616C65617678686577203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146156.763:6157): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146156.765:6158): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.932:6159): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146156.932:6160): pid=32232 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146156.935:6161): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.935:6162): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146156.947:6163): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146156.947:6164): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146156.948:6165): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146156.968:6166): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146156.968:6167): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.008:6168): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.008:6169): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.009:6170): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.028:6171): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.028:6172): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.038:6173): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.038:6174): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.039:6175): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.061:6176): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.061:6177): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.077:6178): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.077:6179): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.078:6180): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146157.129:6181): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146157.129:6182): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727076796D6573796B636A6174676766766265616C6E6A766279796471776A70203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146157.130:6183): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146157.131:6184): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.296:6185): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146157.296:6186): pid=32299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.298:6187): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.298:6188): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.312:6189): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.312:6190): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.313:6191): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.336:6192): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.336:6193): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.346:6194): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.346:6195): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.347:6196): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.368:6197): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.368:6198): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.379:6199): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.379:6200): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.380:6201): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32333 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146157.429:6202): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146157.429:6203): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D72636E73777169696A746B796564786C6C666369716B7170617A7164627271203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146157.430:6204): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146157.431:6205): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.590:6206): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146157.591:6207): pid=32346 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.593:6208): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.593:6209): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.604:6210): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.604:6211): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.605:6212): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.626:6213): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.626:6214): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.667:6215): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.667:6216): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.668:6217): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.688:6218): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.688:6219): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.699:6220): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.699:6221): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.700:6222): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146157.722:6223): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.722:6224): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.760:6225): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.760:6226): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.761:6227): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146157.811:6228): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146157.811:6229): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677577706F62636C77676F68726D6C68747567646375746D6E6F656975617270203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146157.811:6230): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146157.813:6231): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.963:6232): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146157.963:6233): pid=32412 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146157.965:6234): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146157.965:6235): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146157.979:6236): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146157.979:6237): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146157.980:6238): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32417 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.001:6239): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.001:6240): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.012:6241): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.012:6242): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.013:6243): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.032:6244): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.032:6245): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.044:6246): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.044:6247): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.045:6248): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146158.094:6249): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146158.094:6250): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66797A6B6477676E6A66636F677976616F696D79777A697A6479756C74716167203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146158.095:6251): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146158.096:6252): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.257:6253): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146158.257:6254): pid=32459 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.260:6255): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.260:6256): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.271:6257): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.271:6258): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.272:6259): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.291:6260): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.291:6261): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.331:6262): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.331:6263): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.332:6264): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.351:6265): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.351:6266): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.361:6267): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.361:6268): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.362:6269): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.384:6270): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.384:6271): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.414:6272): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.414:6273): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.415:6274): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146158.464:6275): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146158.464:6276): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A746E6D727577706171686F6662686A6379736D746B737974646875676D646A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146158.464:6277): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146158.465:6278): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.609:6279): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146158.609:6280): pid=32525 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.611:6281): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.612:6282): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.625:6283): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.625:6284): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.626:6285): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32530 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.649:6286): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.649:6287): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.659:6288): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.659:6289): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.660:6290): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.680:6291): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.680:6292): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.692:6293): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.692:6294): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.693:6295): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146158.743:6296): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146158.743:6297): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79757476706D7671726B6971756464687376656F71706277707273746C786D69203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146158.743:6298): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146158.745:6299): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.905:6300): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146158.905:6301): pid=32572 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146158.907:6302): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.907:6303): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.918:6304): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.918:6305): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.919:6306): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146158.939:6307): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146158.939:6308): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146158.980:6309): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146158.980:6310): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146158.981:6311): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.000:6312): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.000:6313): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.010:6314): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.010:6315): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.010:6316): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.035:6317): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.035:6318): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.051:6319): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.051:6320): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.051:6321): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146159.104:6322): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146159.104:6323): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6266757871796F706B767A697876766F757A676768656C77746F666467756D203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146159.104:6324): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146159.106:6325): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.254:6326): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146159.254:6327): pid=32638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.256:6328): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.256:6329): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.270:6330): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.270:6331): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.270:6332): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.291:6333): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.291:6334): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.302:6335): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.302:6336): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.302:6337): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32657 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.323:6338): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.323:6339): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.336:6340): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.336:6341): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.337:6342): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32672 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146159.387:6343): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146159.387:6344): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7075796972796A666D656D7570686665746A6E73627A6D6C686B626B6F646F6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146159.387:6345): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146159.389:6346): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.541:6347): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146159.541:6348): pid=32685 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.543:6349): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.543:6350): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.554:6351): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.554:6352): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.555:6353): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.575:6354): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.575:6355): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.614:6356): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.614:6357): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.615:6358): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.633:6359): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.633:6360): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.644:6361): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.644:6362): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.646:6363): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.674:6364): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.674:6365): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.730:6366): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.730:6367): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.731:6368): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146159.782:6369): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146159.782:6370): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163697061796C65667178616A6A67686C7764686C6362687669706A61757262203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146159.783:6371): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146159.784:6372): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.935:6373): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146159.935:6374): pid=32751 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146159.938:6375): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.938:6376): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.954:6377): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.954:6378): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.955:6379): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146159.977:6380): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146159.977:6381): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146159.987:6382): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146159.987:6383): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146159.988:6384): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.009:6385): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.009:6386): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.021:6387): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.021:6388): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.022:6389): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146160.072:6390): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146160.072:6391): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636665717A6E73776B6D646661736F6C696F667163726476736276666E7565203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146160.072:6392): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146160.074:6393): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.240:6394): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146160.240:6395): pid=32798 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.243:6396): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.243:6397): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.254:6398): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.254:6399): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.255:6400): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.277:6401): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.277:6402): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.318:6403): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.318:6404): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.319:6405): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32817 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.342:6406): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.342:6407): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.353:6408): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.353:6409): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.354:6410): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.377:6411): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.377:6412): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.401:6413): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.401:6414): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.402:6415): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146160.452:6416): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146160.452:6417): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6275796D767A6D786C69796B6566626D656B6D7575786667617A6E6B767A203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146160.453:6418): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146160.454:6419): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.600:6420): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146160.600:6421): pid=32864 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.602:6422): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.602:6423): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.616:6424): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.616:6425): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.617:6426): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.638:6427): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.638:6428): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.649:6429): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.649:6430): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.650:6431): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.669:6432): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.669:6433): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.681:6434): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.681:6435): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.682:6436): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146160.731:6437): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146160.731:6438): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6169746E6E7568746962726961706A6368617577677A6F7568756C7478636F6C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146160.732:6439): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146160.733:6440): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.890:6441): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146160.890:6442): pid=32911 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146160.892:6443): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.892:6444): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.904:6445): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.904:6446): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.905:6447): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32915 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.926:6448): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.926:6449): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.966:6450): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.966:6451): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.967:6452): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146160.986:6453): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146160.986:6454): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146160.996:6455): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146160.996:6456): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146160.997:6457): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.020:6458): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.020:6459): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.037:6460): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.037:6461): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.038:6462): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146161.089:6463): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146161.089:6464): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7976786C67736E6C707573626B6A7871766D646E68657065706D6268797A62203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146161.089:6465): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146161.090:6466): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.244:6467): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146161.244:6468): pid=32977 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.247:6469): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.247:6470): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.262:6471): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.263:6472): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.263:6473): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.284:6474): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.284:6475): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.296:6476): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.296:6477): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.296:6478): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=32996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.316:6479): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.316:6480): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.329:6481): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.329:6482): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.329:6483): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146161.379:6484): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146161.379:6485): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61626D6561636C6778676D7876736B767464726C757867747861707A787A7966203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146161.379:6486): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146161.380:6487): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.534:6488): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146161.534:6489): pid=33024 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.536:6490): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.536:6491): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.547:6492): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.547:6493): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.548:6494): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.569:6495): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.569:6496): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.607:6497): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.607:6498): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.608:6499): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.627:6500): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.627:6501): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.637:6502): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.637:6503): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.638:6504): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.662:6505): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.662:6506): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.678:6507): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.678:6508): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.678:6509): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146161.729:6510): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146161.729:6511): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75786C70736D7478716D72756E736A64617A716F6667616E737A707862736C76203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146161.729:6512): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146161.731:6513): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.941:6514): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146161.941:6515): pid=33090 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146161.943:6516): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.943:6517): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.957:6518): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.957:6519): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.958:6520): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146161.979:6521): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146161.979:6522): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146161.990:6523): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146161.990:6524): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146161.991:6525): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.011:6526): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.011:6527): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.022:6528): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.022:6529): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.023:6530): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146162.073:6531): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146162.073:6532): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7261647A7666726F71737370727A6D697469667461666269716F767266727675203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146162.073:6533): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146162.074:6534): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.232:6535): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146162.232:6536): pid=33137 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.234:6537): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.234:6538): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.246:6539): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.246:6540): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.247:6541): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.268:6542): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.268:6543): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.308:6544): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.308:6545): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.309:6546): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.328:6547): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.328:6548): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.338:6549): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.338:6550): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.339:6551): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33170 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.362:6552): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.362:6553): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.377:6554): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.377:6555): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.378:6556): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146162.428:6557): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146162.428:6558): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C677362697175656C7A7167676E6C646463696A6B7A797A656B6373656B7465203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146162.429:6559): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146162.430:6560): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.577:6561): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146162.577:6562): pid=33203 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.580:6563): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.580:6564): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.593:6565): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.593:6566): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.594:6567): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.615:6568): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.615:6569): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.626:6570): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.626:6571): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.627:6572): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33222 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.647:6573): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.647:6574): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.658:6575): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.658:6576): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.659:6577): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146162.709:6578): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146162.709:6579): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764746F7A726D6F6C6E6C6C686D6368637366756F7365746763716C62636174203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146162.710:6580): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146162.711:6581): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.868:6582): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146162.868:6583): pid=33250 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146162.870:6584): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.870:6585): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.881:6586): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.881:6587): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.882:6588): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.902:6589): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.902:6590): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.944:6591): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.944:6592): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.944:6593): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.963:6594): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.963:6595): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146162.974:6596): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146162.974:6597): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146162.975:6598): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146162.997:6599): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146162.997:6600): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.013:6601): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.013:6602): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.014:6603): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146163.064:6604): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146163.064:6605): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677362716579697A6B6D65646678707467686A79756B636F7576637276747066203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146163.064:6606): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146163.066:6607): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146163.216:6608): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146163.216:6609): pid=33316 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146163.218:6610): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146163.218:6611): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.232:6612): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.232:6613): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.232:6614): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146163.253:6615): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146163.253:6616): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.264:6617): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.264:6618): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.264:6619): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146163.284:6620): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146163.284:6621): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.295:6622): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.295:6623): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.295:6624): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146163.346:6625): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146163.346:6626): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637266786F6A7875706D796C6F747973726D746D726279686C64687072717764203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146163.346:6627): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146163.348:6628): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146163.506:6629): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146163.506:6630): pid=33363 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146163.508:6631): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146163.508:6632): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.519:6633): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.519:6634): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.520:6635): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146163.540:6636): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146163.540:6637): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146163.809:6638): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146163.809:6639): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146163.810:6640): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146163.860:6641): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146163.860:6642): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716E6368636D62757A6B767A74726C6B7876746F75616D787A6F6679637A6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146163.861:6643): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146163.862:6644): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.150:6645): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146164.151:6646): pid=33404 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.153:6647): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146164.153:6648): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146164.194:6649): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146164.194:6650): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146164.195:6651): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146164.244:6652): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146164.244:6653): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A756E61616B78727779626676696A646A6265637177756363616769776E6C203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146164.245:6654): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146164.246:6655): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.516:6656): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146164.516:6657): pid=33428 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.518:6658): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146164.518:6659): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146164.555:6660): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146164.555:6661): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146164.556:6662): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146164.606:6663): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146164.607:6664): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A73797571736D6A70626F677965696C716F736F6771697578736571677770203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146164.607:6665): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146164.608:6666): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.920:6667): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146164.920:6668): pid=33452 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146164.923:6669): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146164.923:6670): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146164.958:6671): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146164.958:6672): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146164.959:6673): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146165.014:6674): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146165.014:6675): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A78666872726C6477786177676B747364776B78697A727A6561626E617677203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146165.014:6676): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146165.016:6677): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146165.316:6678): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146165.317:6679): pid=33475 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146165.319:6680): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146165.319:6681): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146165.354:6682): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146165.354:6683): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146165.355:6684): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146165.405:6685): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146165.405:6686): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67636B6B6865627369676C64706D6F72736B72776E6A70726868676D76636966203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146165.405:6687): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146165.407:6688): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146165.714:6689): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146165.715:6690): pid=33498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146165.717:6691): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146165.717:6692): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146165.754:6693): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146165.754:6694): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146165.754:6695): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146165.806:6696): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146165.806:6697): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62766E6175706A756F6A6662746C77616D637367616A6F6974617A77776D7467203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146165.806:6698): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146165.808:6699): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146166.144:6700): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146166.144:6701): pid=33521 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146166.147:6702): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146166.147:6703): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146166.183:6704): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146166.183:6705): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146166.184:6706): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146166.237:6707): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146166.238:6708): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D667773756E696F7A6B6471657571706E696B6D796175686165657A66746B203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146166.238:6709): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146166.240:6710): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1739146166.381:6711): prog-id=251 op=LOAD
type=SYSCALL msg=audit(1739146166.381:6711): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001979d8 a2=78 a3=c00020e420 items=0 ppid=33555 pid=33566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.381:6711): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343439653338396632373234326462376463383666326662
type=BPF msg=audit(1739146166.381:6712): prog-id=252 op=LOAD
type=SYSCALL msg=audit(1739146166.381:6712): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197770 a2=78 a3=c00020e468 items=0 ppid=33555 pid=33566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.381:6712): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343439653338396632373234326462376463383666326662
type=BPF msg=audit(1739146166.381:6713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146166.381:6714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146166.382:6715): prog-id=253 op=LOAD
type=SYSCALL msg=audit(1739146166.382:6715): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000197c30 a2=78 a3=c00020e4f8 items=0 ppid=33555 pid=33566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.382:6715): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343439653338396632373234326462376463383666326662
type=BPF msg=audit(1739146166.502:6716): prog-id=254 op=LOAD
type=SYSCALL msg=audit(1739146166.502:6716): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014b9d8 a2=78 a3=c0000246b0 items=0 ppid=33600 pid=33610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.502:6716): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316262336662396435623038366466633331653563346362
type=BPF msg=audit(1739146166.502:6717): prog-id=255 op=LOAD
type=SYSCALL msg=audit(1739146166.502:6717): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014b770 a2=78 a3=c0000246f8 items=0 ppid=33600 pid=33610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.502:6717): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316262336662396435623038366466633331653563346362
type=BPF msg=audit(1739146166.502:6718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146166.502:6719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739146166.502:6720): prog-id=256 op=LOAD
type=SYSCALL msg=audit(1739146166.502:6720): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014bc30 a2=78 a3=c000024788 items=0 ppid=33600 pid=33610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.502:6720): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31316262336662396435623038366466633331653563346362
type=USER_END msg=audit(1739146166.574:6721): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146166.575:6722): pid=33545 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146166.577:6723): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146166.577:6724): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146166.617:6725): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146166.617:6726): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146166.618:6727): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146166.671:6728): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146166.671:6729): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6274736D74616A67736E6C647676616477626C70786571636468667969667374203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146166.671:6730): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146166.673:6731): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=NETFILTER_CFG msg=audit(1739146166.703:6732): table=nat:14 family=2 entries=1 op=nft_register_chain pid=33686 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.703:6732): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff6b733d00 a2=0 a3=7fff6b733cec items=0 ppid=33621 pid=33686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.703:6732): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.704:6733): table=nat:15 family=2 entries=1 op=nft_register_chain pid=33687 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.704:6733): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff06cc6a80 a2=0 a3=7fff06cc6a6c items=0 ppid=33621 pid=33687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.704:6733): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.706:6734): table=nat:16 family=2 entries=1 op=nft_register_chain pid=33688 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.706:6734): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffabe55ff0 a2=0 a3=7fffabe55fdc items=0 ppid=33621 pid=33688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.706:6734): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F44452D504F5254002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.707:6735): table=nat:17 family=2 entries=1 op=nft_register_chain pid=33689 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.707:6735): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda4172710 a2=0 a3=7ffda41726fc items=0 ppid=33621 pid=33689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.707:6735): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4C4F41442D42414C414E434552002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.708:6736): table=nat:18 family=2 entries=1 op=nft_register_chain pid=33690 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.708:6736): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffddb9c3d60 a2=0 a3=7ffddb9c3d4c items=0 ppid=33621 pid=33690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.708:6736): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.709:6737): table=filter:19 family=2 entries=1 op=nft_register_chain pid=33691 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.709:6737): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe6b7431f0 a2=0 a3=7ffe6b7431dc items=0 ppid=33621 pid=33691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.709:6737): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.710:6738): table=filter:20 family=2 entries=1 op=nft_register_chain pid=33692 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.710:6738): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb655fd60 a2=0 a3=7fffb655fd4c items=0 ppid=33621 pid=33692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.710:6738): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F44452D504F5254002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.712:6739): table=filter:21 family=2 entries=1 op=nft_register_chain pid=33693 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.712:6739): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca4853b00 a2=0 a3=7ffca4853aec items=0 ppid=33621 pid=33693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.712:6739): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.713:6740): table=filter:22 family=2 entries=1 op=nft_register_chain pid=33694 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.713:6740): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdbc40d9b0 a2=0 a3=7ffdbc40d99c items=0 ppid=33621 pid=33694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.713:6740): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D534F555243452D52414E4745532D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.714:6741): table=filter:23 family=2 entries=1 op=nft_register_chain pid=33695 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.714:6741): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed0a9a590 a2=0 a3=7ffed0a9a57c items=0 ppid=33621 pid=33695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.714:6741): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D495056532D46494C544552002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.716:6742): table=nat:24 family=2 entries=2 op=nft_register_chain pid=33697 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.716:6742): arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd32f934e0 a2=0 a3=7ffd32f934cc items=0 ppid=33621 pid=33697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.716:6742): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1739146166.742:6743): table=nat:25 family=2 entries=2 op=nft_register_chain pid=33700 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.742:6743): arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc38b61a40 a2=0 a3=7ffc38b61a2c items=0 ppid=33621 pid=33700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.742:6743): proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1739146166.746:6744): table=nat:26 family=2 entries=2 op=nft_register_chain pid=33702 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.746:6744): arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc9fe7ec00 a2=0 a3=7ffc9fe7ebec items=0 ppid=33621 pid=33702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.746:6744): proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1739146166.749:6745): table=filter:27 family=2 entries=2 op=nft_register_chain pid=33704 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.749:6745): arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff673e2300 a2=0 a3=7fff673e22ec items=0 ppid=33621 pid=33704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.749:6745): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1739146166.753:6746): table=filter:28 family=2 entries=1 op=nft_register_rule pid=33706 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.753:6746): arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff75b62db0 a2=0 a3=7fff75b62d9c items=0 ppid=33621 pid=33706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.753:6746): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B2072756C6573002D6A004B5542452D4E4F44452D504F5254
type=NETFILTER_CFG msg=audit(1739146166.755:6747): table=filter:29 family=2 entries=1 op=nft_register_rule pid=33708 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.755:6747): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcf33b9020 a2=0 a3=7ffcf33b900c items=0 ppid=33621 pid=33708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.755:6747): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B7562652D70726F7879206669726577616C6C2072756C6573002D6A004B5542452D50524F58592D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146166.758:6748): table=filter:30 family=2 entries=1 op=nft_register_rule pid=33710 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.758:6748): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffefc0272c0 a2=0 a3=7ffefc0272ac items=0 ppid=33621 pid=33710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.758:6748): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B7562652D70726F7879206669726577616C6C2072756C6573002D6A004B5542452D50524F58592D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146166.761:6749): table=filter:31 family=2 entries=1 op=nft_register_rule pid=33712 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1739146166.761:6749): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe01bfe850 a2=0 a3=7ffe01bfe83c items=0 ppid=33621 pid=33712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.761:6749): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732069707673206163636573732066696C746572002D6A004B5542452D495056532D46494C544552
type=NETFILTER_CFG msg=audit(1739146166.885:6750): table=nat:32 family=2 entries=9 op=nft_register_rule pid=33767 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146166.885:6750): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd3fc36580 a2=0 a3=7ffd3fc3656c items=0 ppid=33621 pid=33767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.885:6750): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146166.895:6751): table=filter:33 family=2 entries=10 op=nft_register_rule pid=33767 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146166.895:6751): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd3fc36580 a2=0 a3=7ffd3fc3656c items=0 ppid=33621 pid=33767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.895:6751): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146166.897:6752): table=nat:34 family=10 entries=1 op=nft_register_chain pid=33773 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.897:6752): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe173e6290 a2=0 a3=7ffe173e627c items=0 ppid=33621 pid=33773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.897:6752): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.898:6753): table=nat:35 family=10 entries=1 op=nft_register_chain pid=33774 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.898:6753): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebde050d0 a2=0 a3=7ffebde050bc items=0 ppid=33621 pid=33774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.898:6753): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.899:6754): table=nat:36 family=10 entries=1 op=nft_register_chain pid=33775 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.899:6754): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdbedd6c90 a2=0 a3=7ffdbedd6c7c items=0 ppid=33621 pid=33775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.899:6754): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F44452D504F5254002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.900:6755): table=nat:37 family=10 entries=1 op=nft_register_chain pid=33776 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.900:6755): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfc7cb2e0 a2=0 a3=7ffcfc7cb2cc items=0 ppid=33621 pid=33776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.900:6755): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4C4F41442D42414C414E434552002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.901:6756): table=nat:38 family=10 entries=1 op=nft_register_chain pid=33777 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.901:6756): arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff855202b0 a2=0 a3=7fff8552029c items=0 ppid=33621 pid=33777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.901:6756): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1739146166.902:6757): table=filter:39 family=10 entries=1 op=nft_register_chain pid=33778 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.902:6757): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc6cb2b9d0 a2=0 a3=7ffc6cb2b9bc items=0 ppid=33621 pid=33778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.902:6757): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.904:6758): table=filter:40 family=10 entries=1 op=nft_register_chain pid=33779 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.904:6758): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd7ce02c0 a2=0 a3=7fffd7ce02ac items=0 ppid=33621 pid=33779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.904:6758): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F44452D504F5254002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.905:6759): table=filter:41 family=10 entries=1 op=nft_register_chain pid=33780 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.905:6759): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea9f02dc0 a2=0 a3=7ffea9f02dac items=0 ppid=33621 pid=33780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.905:6759): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.906:6760): table=filter:42 family=10 entries=1 op=nft_register_chain pid=33781 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.906:6760): arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff82294690 a2=0 a3=7fff8229467c items=0 ppid=33621 pid=33781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.906:6760): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D534F555243452D52414E4745532D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.907:6761): table=filter:43 family=10 entries=1 op=nft_register_chain pid=33782 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.907:6761): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5bcc2f30 a2=0 a3=7ffc5bcc2f1c items=0 ppid=33621 pid=33782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.907:6761): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D495056532D46494C544552002D740066696C746572
type=NETFILTER_CFG msg=audit(1739146166.909:6762): table=nat:44 family=10 entries=2 op=nft_register_chain pid=33784 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.909:6762): arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd4a6158c0 a2=0 a3=7ffd4a6158ac items=0 ppid=33621 pid=33784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.909:6762): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1739146166.913:6763): table=nat:45 family=10 entries=2 op=nft_register_chain pid=33786 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.913:6763): arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff5f8b4d10 a2=0 a3=7fff5f8b4cfc items=0 ppid=33621 pid=33786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.913:6763): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1739146166.916:6764): table=nat:46 family=10 entries=2 op=nft_register_chain pid=33788 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.916:6764): arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffff771cbb0 a2=0 a3=7ffff771cb9c items=0 ppid=33621 pid=33788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.916:6764): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1739146166.918:6765): table=filter:47 family=10 entries=2 op=nft_register_chain pid=33790 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.918:6765): arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd708efcb0 a2=0 a3=7ffd708efc9c items=0 ppid=33621 pid=33790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.918:6765): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1739146166.921:6766): table=filter:48 family=10 entries=2 op=nft_register_chain pid=33792 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.921:6766): arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcbe72ef70 a2=0 a3=7ffcbe72ef5c items=0 ppid=33621 pid=33792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.921:6766): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B2072756C6573002D6A004B5542452D4E4F44452D504F5254
type=NETFILTER_CFG msg=audit(1739146166.924:6767): table=filter:49 family=10 entries=1 op=nft_register_rule pid=33794 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.924:6767): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcb9fcdb50 a2=0 a3=7ffcb9fcdb3c items=0 ppid=33621 pid=33794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.924:6767): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B7562652D70726F7879206669726577616C6C2072756C6573002D6A004B5542452D50524F58592D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146166.928:6768): table=filter:50 family=10 entries=1 op=nft_register_rule pid=33796 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.928:6768): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd28e34270 a2=0 a3=7ffd28e3425c items=0 ppid=33621 pid=33796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.928:6768): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B7562652D70726F7879206669726577616C6C2072756C6573002D6A004B5542452D50524F58592D4649524557414C4C
type=NETFILTER_CFG msg=audit(1739146166.931:6769): table=filter:51 family=10 entries=1 op=nft_register_rule pid=33798 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1739146166.931:6769): arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffb6c3bff0 a2=0 a3=7fffb6c3bfdc items=0 ppid=33621 pid=33798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.931:6769): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732069707673206163636573732066696C746572002D6A004B5542452D495056532D46494C544552
type=USER_END msg=audit(1739146166.958:6770): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146166.958:6771): pid=33683 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146166.961:6772): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146166.961:6773): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=NETFILTER_CFG msg=audit(1739146166.971:6774): table=nat:52 family=10 entries=7 op=nft_register_rule pid=33833 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146166.971:6774): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffa15cdf10 a2=0 a3=7fffa15cdefc items=0 ppid=33621 pid=33833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.971:6774): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146166.982:6775): table=filter:53 family=10 entries=10 op=nft_register_rule pid=33833 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146166.982:6775): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa15cdf10 a2=0 a3=7fffa15cdefc items=0 ppid=33621 pid=33833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146166.982:6775): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=USER_LOGIN msg=audit(1739146166.997:6776): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146166.997:6777): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146166.998:6778): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33836 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146167.053:6779): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146167.053:6780): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A6C6A6667707675697877737071626168716C646A726E7075706361696B6E203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146167.053:6781): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146167.055:6782): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146167.332:6783): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146167.333:6784): pid=33849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146167.335:6785): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146167.335:6786): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146167.371:6787): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146167.371:6788): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146167.371:6789): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146167.420:6790): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146167.421:6791): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F69687263796E656B727265617579717679736562717A677468657A676A72203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146167.421:6792): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146167.422:6793): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146167.689:6794): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146167.689:6795): pid=33872 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146167.691:6796): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146167.691:6797): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1739146167.726:6798): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739146167.726:6799): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146167.727:6800): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=33882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739146167.777:6801): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146167.777:6802): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B66746C72736B7463616B62647461637A74727A6F69746776636F6871736E73203B20414C4C5F50524F58593D2727204654505F50524F58593D27272048545450535F50524F58593D272720485454505F50524F58593D2727204E4F5F50524F58593D272720616C6C5F70726F78793D2727206674705F70726F78793D272720687474705F70726F78793D27272068747470735F70726F78793D2727206E6F5F70726F78793D2727202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146167.777:6803): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146167.780:6804): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146168.093:6805): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146168.093:6806): pid=33895 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146168.095:6807): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146168.095:6808): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_ACCT msg=audit(1739146179.056:6809): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146179.056:6810): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd=6370202F726F6F742F2E6B7562652F636F6E666967202F686F6D652F726F636B792F2E6B7562652F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146179.057:6811): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146179.058:6812): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146179.061:6813): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146179.061:6814): pid=34533 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739146179.096:6815): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146179.096:6816): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd=63686F776E202D5220313030303A31303030202F686F6D652F726F636B792F2E6B756265 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146179.096:6817): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146179.098:6818): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146179.102:6819): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146179.102:6820): pid=34538 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739146179.136:6821): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739146179.136:6822): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/kubespray" cmd=646F636B6572207073202D71202D2D66696C746572206E616D653D6B38735F504F445F6B7562652D6170697365727665722A exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739146179.136:6823): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739146179.137:6824): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739146179.158:6825): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739146179.159:6826): pid=34542 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146179.174:6827): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12070 suid=1000 rport=52308 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146179.174:6828): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146179.176:6829): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739146179.176:6830): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739146179.177:6831): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739146179.177:6832): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146179.177:6833): pid=12067 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=12067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=NETFILTER_CFG msg=audit(1739146196.703:6834): table=nat:54 family=10 entries=14 op=nft_register_rule pid=34675 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146196.703:6834): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff305e17f0 a2=0 a3=7fff305e17dc items=0 ppid=33621 pid=34675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146196.703:6834): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146196.704:6835): table=filter:55 family=10 entries=20 op=nft_register_rule pid=34675 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146196.704:6835): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff305e17f0 a2=0 a3=7fff305e17dc items=0 ppid=33621 pid=34675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146196.704:6835): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146196.716:6836): table=nat:56 family=2 entries=18 op=nft_register_rule pid=34678 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146196.716:6836): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe9326e260 a2=0 a3=7ffe9326e24c items=0 ppid=33621 pid=34678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146196.716:6836): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146196.722:6837): table=filter:57 family=2 entries=20 op=nft_register_rule pid=34678 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146196.722:6837): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9326e260 a2=0 a3=7ffe9326e24c items=0 ppid=33621 pid=34678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146196.722:6837): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146226.794:6838): table=nat:58 family=10 entries=14 op=nft_register_rule pid=34770 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146226.794:6838): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff8f3005d0 a2=0 a3=7fff8f3005bc items=0 ppid=33621 pid=34770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146226.794:6838): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146226.794:6839): table=filter:59 family=10 entries=20 op=nft_register_rule pid=34770 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146226.794:6839): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff8f3005d0 a2=0 a3=7fff8f3005bc items=0 ppid=33621 pid=34770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146226.794:6839): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146226.817:6840): table=nat:60 family=2 entries=18 op=nft_register_rule pid=34787 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146226.817:6840): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffde8a982d0 a2=0 a3=7ffde8a982bc items=0 ppid=33621 pid=34787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146226.817:6840): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146226.818:6841): table=filter:61 family=2 entries=20 op=nft_register_rule pid=34787 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146226.818:6841): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffde8a982d0 a2=0 a3=7ffde8a982bc items=0 ppid=33621 pid=34787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146226.818:6841): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1739146228.141:6842): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15165 suid=1000 rport=44498 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146228.141:6843): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739146228.142:6844): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739146228.142:6845): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739146228.143:6846): pid=15159 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=15159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1739146238.206:6847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739146238.223:6848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739146250.374:6849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739146256.872:6850): table=nat:62 family=10 entries=14 op=nft_register_rule pid=34890 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146256.872:6850): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffea646db30 a2=0 a3=7ffea646db1c items=0 ppid=33621 pid=34890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146256.872:6850): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146256.873:6851): table=filter:63 family=10 entries=20 op=nft_register_rule pid=34890 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146256.873:6851): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffea646db30 a2=0 a3=7ffea646db1c items=0 ppid=33621 pid=34890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146256.873:6851): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146256.906:6852): table=nat:64 family=2 entries=18 op=nft_register_rule pid=34917 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146256.906:6852): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffeebb7bcc0 a2=0 a3=7ffeebb7bcac items=0 ppid=33621 pid=34917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146256.906:6852): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146256.907:6853): table=filter:65 family=2 entries=20 op=nft_register_rule pid=34917 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146256.907:6853): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeebb7bcc0 a2=0 a3=7ffeebb7bcac items=0 ppid=33621 pid=34917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146256.907:6853): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146286.936:6854): table=nat:66 family=10 entries=14 op=nft_register_rule pid=34988 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146286.936:6854): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd35941ff0 a2=0 a3=7ffd35941fdc items=0 ppid=33621 pid=34988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146286.936:6854): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146286.944:6855): table=filter:67 family=10 entries=20 op=nft_register_rule pid=34988 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146286.944:6855): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd35941ff0 a2=0 a3=7ffd35941fdc items=0 ppid=33621 pid=34988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146286.944:6855): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146286.985:6856): table=nat:68 family=2 entries=18 op=nft_register_rule pid=35026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146286.985:6856): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe0833d9b0 a2=0 a3=7ffe0833d99c items=0 ppid=33621 pid=35026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146286.985:6856): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146286.985:6857): table=filter:69 family=2 entries=20 op=nft_register_rule pid=35026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146286.985:6857): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe0833d9b0 a2=0 a3=7ffe0833d99c items=0 ppid=33621 pid=35026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146286.985:6857): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146317.005:6858): table=nat:70 family=10 entries=14 op=nft_register_rule pid=35103 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146317.005:6858): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff70916990 a2=0 a3=7fff7091697c items=0 ppid=33621 pid=35103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146317.005:6858): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146317.006:6859): table=filter:71 family=10 entries=20 op=nft_register_rule pid=35103 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146317.006:6859): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff70916990 a2=0 a3=7fff7091697c items=0 ppid=33621 pid=35103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146317.006:6859): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146317.058:6860): table=nat:72 family=2 entries=18 op=nft_register_rule pid=35148 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146317.058:6860): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe629b9610 a2=0 a3=7ffe629b95fc items=0 ppid=33621 pid=35148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146317.058:6860): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146317.059:6861): table=filter:73 family=2 entries=20 op=nft_register_rule pid=35148 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146317.059:6861): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe629b9610 a2=0 a3=7ffe629b95fc items=0 ppid=33621 pid=35148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146317.059:6861): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146347.074:6862): table=nat:74 family=10 entries=14 op=nft_register_rule pid=35208 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146347.074:6862): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd481e34a0 a2=0 a3=7ffd481e348c items=0 ppid=33621 pid=35208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146347.074:6862): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146347.074:6863): table=filter:75 family=10 entries=20 op=nft_register_rule pid=35208 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146347.074:6863): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd481e34a0 a2=0 a3=7ffd481e348c items=0 ppid=33621 pid=35208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146347.074:6863): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146347.133:6864): table=nat:76 family=2 entries=18 op=nft_register_rule pid=35254 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146347.133:6864): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe15f69230 a2=0 a3=7ffe15f6921c items=0 ppid=33621 pid=35254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146347.133:6864): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146347.133:6865): table=filter:77 family=2 entries=20 op=nft_register_rule pid=35254 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146347.133:6865): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe15f69230 a2=0 a3=7ffe15f6921c items=0 ppid=33621 pid=35254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146347.133:6865): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146377.139:6866): table=nat:78 family=10 entries=14 op=nft_register_rule pid=35316 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146377.139:6866): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffb6ec2d60 a2=0 a3=7fffb6ec2d4c items=0 ppid=33621 pid=35316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146377.139:6866): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146377.140:6867): table=filter:79 family=10 entries=20 op=nft_register_rule pid=35316 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146377.140:6867): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffb6ec2d60 a2=0 a3=7fffb6ec2d4c items=0 ppid=33621 pid=35316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146377.140:6867): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146377.218:6868): table=nat:80 family=2 entries=18 op=nft_register_rule pid=35369 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146377.218:6868): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd7ba2ef50 a2=0 a3=7ffd7ba2ef3c items=0 ppid=33621 pid=35369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146377.218:6868): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146377.219:6869): table=filter:81 family=2 entries=20 op=nft_register_rule pid=35369 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146377.219:6869): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7ba2ef50 a2=0 a3=7ffd7ba2ef3c items=0 ppid=33621 pid=35369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146377.219:6869): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146407.214:6870): table=nat:82 family=10 entries=14 op=nft_register_rule pid=35430 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146407.214:6870): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe2db06260 a2=0 a3=7ffe2db0624c items=0 ppid=33621 pid=35430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146407.214:6870): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146407.215:6871): table=filter:83 family=10 entries=20 op=nft_register_rule pid=35430 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146407.215:6871): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe2db06260 a2=0 a3=7ffe2db0624c items=0 ppid=33621 pid=35430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146407.215:6871): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146407.284:6872): table=nat:84 family=2 entries=18 op=nft_register_rule pid=35483 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146407.284:6872): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd0c26eff0 a2=0 a3=7ffd0c26efdc items=0 ppid=33621 pid=35483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146407.284:6872): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146407.284:6873): table=filter:85 family=2 entries=20 op=nft_register_rule pid=35483 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146407.284:6873): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0c26eff0 a2=0 a3=7ffd0c26efdc items=0 ppid=33621 pid=35483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146407.284:6873): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146437.282:6874): table=nat:86 family=10 entries=14 op=nft_register_rule pid=35545 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146437.282:6874): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe98b762e0 a2=0 a3=7ffe98b762cc items=0 ppid=33621 pid=35545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146437.282:6874): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146437.283:6875): table=filter:87 family=10 entries=20 op=nft_register_rule pid=35545 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146437.283:6875): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe98b762e0 a2=0 a3=7ffe98b762cc items=0 ppid=33621 pid=35545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146437.283:6875): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146437.348:6876): table=nat:88 family=2 entries=18 op=nft_register_rule pid=35598 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146437.348:6876): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdc7de58d0 a2=0 a3=7ffdc7de58bc items=0 ppid=33621 pid=35598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146437.348:6876): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146437.349:6877): table=filter:89 family=2 entries=20 op=nft_register_rule pid=35598 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146437.349:6877): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc7de58d0 a2=0 a3=7ffdc7de58bc items=0 ppid=33621 pid=35598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146437.349:6877): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146467.350:6878): table=nat:90 family=10 entries=14 op=nft_register_rule pid=35658 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146467.350:6878): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe0eeca0a0 a2=0 a3=7ffe0eeca08c items=0 ppid=33621 pid=35658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146467.350:6878): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146467.350:6879): table=filter:91 family=10 entries=20 op=nft_register_rule pid=35658 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146467.350:6879): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe0eeca0a0 a2=0 a3=7ffe0eeca08c items=0 ppid=33621 pid=35658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146467.350:6879): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146467.418:6880): table=nat:92 family=2 entries=18 op=nft_register_rule pid=35711 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146467.418:6880): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd91db9600 a2=0 a3=7ffd91db95ec items=0 ppid=33621 pid=35711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146467.418:6880): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146467.418:6881): table=filter:93 family=2 entries=20 op=nft_register_rule pid=35711 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146467.418:6881): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd91db9600 a2=0 a3=7ffd91db95ec items=0 ppid=33621 pid=35711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146467.418:6881): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146497.415:6882): table=nat:94 family=10 entries=14 op=nft_register_rule pid=35773 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146497.415:6882): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe54271c90 a2=0 a3=7ffe54271c7c items=0 ppid=33621 pid=35773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146497.415:6882): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146497.416:6883): table=filter:95 family=10 entries=20 op=nft_register_rule pid=35773 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146497.416:6883): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe54271c90 a2=0 a3=7ffe54271c7c items=0 ppid=33621 pid=35773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146497.416:6883): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146497.484:6884): table=nat:96 family=2 entries=18 op=nft_register_rule pid=35826 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146497.484:6884): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffce8a26fc0 a2=0 a3=7ffce8a26fac items=0 ppid=33621 pid=35826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146497.484:6884): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146497.485:6885): table=filter:97 family=2 entries=20 op=nft_register_rule pid=35826 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146497.485:6885): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffce8a26fc0 a2=0 a3=7ffce8a26fac items=0 ppid=33621 pid=35826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146497.485:6885): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146527.487:6886): table=nat:98 family=10 entries=14 op=nft_register_rule pid=35886 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146527.487:6886): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe6ca3f0d0 a2=0 a3=7ffe6ca3f0bc items=0 ppid=33621 pid=35886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146527.487:6886): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146527.488:6887): table=filter:99 family=10 entries=20 op=nft_register_rule pid=35886 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146527.488:6887): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe6ca3f0d0 a2=0 a3=7ffe6ca3f0bc items=0 ppid=33621 pid=35886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146527.488:6887): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146527.552:6888): table=nat:100 family=2 entries=18 op=nft_register_rule pid=35939 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146527.552:6888): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc97ec3210 a2=0 a3=7ffc97ec31fc items=0 ppid=33621 pid=35939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146527.552:6888): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146527.552:6889): table=filter:101 family=2 entries=20 op=nft_register_rule pid=35939 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146527.552:6889): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc97ec3210 a2=0 a3=7ffc97ec31fc items=0 ppid=33621 pid=35939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146527.552:6889): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146557.557:6890): table=nat:102 family=10 entries=14 op=nft_register_rule pid=36008 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146557.557:6890): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe1046c690 a2=0 a3=7ffe1046c67c items=0 ppid=33621 pid=36008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146557.557:6890): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146557.558:6891): table=filter:103 family=10 entries=20 op=nft_register_rule pid=36008 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146557.558:6891): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1046c690 a2=0 a3=7ffe1046c67c items=0 ppid=33621 pid=36008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146557.558:6891): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146557.619:6892): table=nat:104 family=2 entries=18 op=nft_register_rule pid=36061 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146557.619:6892): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff3c7489c0 a2=0 a3=7fff3c7489ac items=0 ppid=33621 pid=36061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146557.619:6892): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146557.620:6893): table=filter:105 family=2 entries=20 op=nft_register_rule pid=36061 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146557.620:6893): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3c7489c0 a2=0 a3=7fff3c7489ac items=0 ppid=33621 pid=36061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146557.620:6893): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146587.619:6894): table=nat:106 family=10 entries=14 op=nft_register_rule pid=36122 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146587.619:6894): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd28193460 a2=0 a3=7ffd2819344c items=0 ppid=33621 pid=36122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146587.619:6894): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146587.621:6895): table=filter:107 family=10 entries=20 op=nft_register_rule pid=36122 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146587.621:6895): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd28193460 a2=0 a3=7ffd2819344c items=0 ppid=33621 pid=36122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146587.621:6895): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146587.681:6896): table=nat:108 family=2 entries=18 op=nft_register_rule pid=36176 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146587.681:6896): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdb7227cc0 a2=0 a3=7ffdb7227cac items=0 ppid=33621 pid=36176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146587.681:6896): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146587.682:6897): table=filter:109 family=2 entries=20 op=nft_register_rule pid=36176 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146587.682:6897): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb7227cc0 a2=0 a3=7ffdb7227cac items=0 ppid=33621 pid=36176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146587.682:6897): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_START msg=audit(1739146616.240:6898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739146616.240:6899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739146617.689:6900): table=nat:110 family=10 entries=14 op=nft_register_rule pid=36243 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146617.689:6900): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc99485c50 a2=0 a3=7ffc99485c3c items=0 ppid=33621 pid=36243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146617.689:6900): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146617.689:6901): table=filter:111 family=10 entries=20 op=nft_register_rule pid=36243 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146617.689:6901): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc99485c50 a2=0 a3=7ffc99485c3c items=0 ppid=33621 pid=36243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146617.689:6901): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146617.758:6902): table=nat:112 family=2 entries=18 op=nft_register_rule pid=36296 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146617.758:6902): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe34978080 a2=0 a3=7ffe3497806c items=0 ppid=33621 pid=36296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146617.758:6902): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146617.758:6903): table=filter:113 family=2 entries=20 op=nft_register_rule pid=36296 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146617.758:6903): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe34978080 a2=0 a3=7ffe3497806c items=0 ppid=33621 pid=36296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146617.758:6903): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146647.756:6904): table=nat:114 family=10 entries=14 op=nft_register_rule pid=36356 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146647.756:6904): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffd0924720 a2=0 a3=7fffd092470c items=0 ppid=33621 pid=36356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146647.756:6904): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146647.756:6905): table=filter:115 family=10 entries=20 op=nft_register_rule pid=36356 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146647.756:6905): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffd0924720 a2=0 a3=7fffd092470c items=0 ppid=33621 pid=36356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146647.756:6905): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146647.825:6906): table=nat:116 family=2 entries=18 op=nft_register_rule pid=36409 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146647.825:6906): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd68c52ae0 a2=0 a3=7ffd68c52acc items=0 ppid=33621 pid=36409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146647.825:6906): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146647.826:6907): table=filter:117 family=2 entries=20 op=nft_register_rule pid=36409 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146647.826:6907): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd68c52ae0 a2=0 a3=7ffd68c52acc items=0 ppid=33621 pid=36409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146647.826:6907): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146677.820:6908): table=nat:118 family=10 entries=14 op=nft_register_rule pid=36472 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146677.820:6908): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcddef68f0 a2=0 a3=7ffcddef68dc items=0 ppid=33621 pid=36472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146677.820:6908): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146677.820:6909): table=filter:119 family=10 entries=20 op=nft_register_rule pid=36472 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146677.820:6909): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcddef68f0 a2=0 a3=7ffcddef68dc items=0 ppid=33621 pid=36472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146677.820:6909): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146677.892:6910): table=nat:120 family=2 entries=18 op=nft_register_rule pid=36525 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146677.892:6910): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc6ce609b0 a2=0 a3=7ffc6ce6099c items=0 ppid=33621 pid=36525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146677.892:6910): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146677.893:6911): table=filter:121 family=2 entries=20 op=nft_register_rule pid=36525 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146677.893:6911): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc6ce609b0 a2=0 a3=7ffc6ce6099c items=0 ppid=33621 pid=36525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146677.893:6911): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146707.893:6912): table=nat:122 family=10 entries=14 op=nft_register_rule pid=36578 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146707.893:6912): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffb35ccbc0 a2=0 a3=7fffb35ccbac items=0 ppid=33621 pid=36578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146707.893:6912): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146707.894:6913): table=filter:123 family=10 entries=20 op=nft_register_rule pid=36578 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146707.894:6913): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffb35ccbc0 a2=0 a3=7fffb35ccbac items=0 ppid=33621 pid=36578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146707.894:6913): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146707.958:6914): table=nat:124 family=2 entries=18 op=nft_register_rule pid=36631 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146707.958:6914): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff625e0470 a2=0 a3=7fff625e045c items=0 ppid=33621 pid=36631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146707.958:6914): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146707.958:6915): table=filter:125 family=2 entries=20 op=nft_register_rule pid=36631 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146707.958:6915): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff625e0470 a2=0 a3=7fff625e045c items=0 ppid=33621 pid=36631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146707.958:6915): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146737.960:6916): table=nat:126 family=10 entries=14 op=nft_register_rule pid=36700 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146737.960:6916): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe8ee41080 a2=0 a3=7ffe8ee4106c items=0 ppid=33621 pid=36700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146737.960:6916): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146737.961:6917): table=filter:127 family=10 entries=20 op=nft_register_rule pid=36700 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146737.961:6917): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8ee41080 a2=0 a3=7ffe8ee4106c items=0 ppid=33621 pid=36700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146737.961:6917): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146738.029:6918): table=nat:128 family=2 entries=18 op=nft_register_rule pid=36754 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146738.029:6918): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe7c549be0 a2=0 a3=7ffe7c549bcc items=0 ppid=33621 pid=36754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146738.029:6918): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146738.030:6919): table=filter:129 family=2 entries=20 op=nft_register_rule pid=36754 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146738.030:6919): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7c549be0 a2=0 a3=7ffe7c549bcc items=0 ppid=33621 pid=36754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146738.030:6919): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146768.023:6920): table=nat:130 family=10 entries=14 op=nft_register_rule pid=36807 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146768.023:6920): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe19cd6990 a2=0 a3=7ffe19cd697c items=0 ppid=33621 pid=36807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146768.023:6920): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146768.023:6921): table=filter:131 family=10 entries=20 op=nft_register_rule pid=36807 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146768.023:6921): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe19cd6990 a2=0 a3=7ffe19cd697c items=0 ppid=33621 pid=36807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146768.023:6921): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146768.099:6922): table=nat:132 family=2 entries=18 op=nft_register_rule pid=36860 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146768.099:6922): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd0be899f0 a2=0 a3=7ffd0be899dc items=0 ppid=33621 pid=36860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146768.099:6922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146768.100:6923): table=filter:133 family=2 entries=20 op=nft_register_rule pid=36860 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146768.100:6923): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0be899f0 a2=0 a3=7ffd0be899dc items=0 ppid=33621 pid=36860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146768.100:6923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146798.092:6924): table=nat:134 family=10 entries=14 op=nft_register_rule pid=36929 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146798.092:6924): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc04835ad0 a2=0 a3=7ffc04835abc items=0 ppid=33621 pid=36929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146798.092:6924): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146798.093:6925): table=filter:135 family=10 entries=20 op=nft_register_rule pid=36929 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146798.093:6925): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc04835ad0 a2=0 a3=7ffc04835abc items=0 ppid=33621 pid=36929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146798.093:6925): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146798.167:6926): table=nat:136 family=2 entries=18 op=nft_register_rule pid=36982 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146798.167:6926): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc48bb38f0 a2=0 a3=7ffc48bb38dc items=0 ppid=33621 pid=36982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146798.167:6926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146798.167:6927): table=filter:137 family=2 entries=20 op=nft_register_rule pid=36982 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146798.167:6927): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc48bb38f0 a2=0 a3=7ffc48bb38dc items=0 ppid=33621 pid=36982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146798.167:6927): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146828.164:6928): table=nat:138 family=10 entries=14 op=nft_register_rule pid=37035 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146828.164:6928): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffda6377070 a2=0 a3=7ffda637705c items=0 ppid=33621 pid=37035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146828.164:6928): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146828.164:6929): table=filter:139 family=10 entries=20 op=nft_register_rule pid=37035 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146828.164:6929): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffda6377070 a2=0 a3=7ffda637705c items=0 ppid=33621 pid=37035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146828.164:6929): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146828.247:6930): table=nat:140 family=2 entries=18 op=nft_register_rule pid=37088 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146828.247:6930): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1e5c84e0 a2=0 a3=7ffe1e5c84cc items=0 ppid=33621 pid=37088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146828.247:6930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146828.247:6931): table=filter:141 family=2 entries=20 op=nft_register_rule pid=37088 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146828.247:6931): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1e5c84e0 a2=0 a3=7ffe1e5c84cc items=0 ppid=33621 pid=37088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146828.247:6931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146858.235:6932): table=nat:142 family=10 entries=14 op=nft_register_rule pid=37164 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146858.235:6932): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc91c1a270 a2=0 a3=7ffc91c1a25c items=0 ppid=33621 pid=37164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146858.235:6932): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146858.235:6933): table=filter:143 family=10 entries=20 op=nft_register_rule pid=37164 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146858.235:6933): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc91c1a270 a2=0 a3=7ffc91c1a25c items=0 ppid=33621 pid=37164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146858.235:6933): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146858.316:6934): table=nat:144 family=2 entries=18 op=nft_register_rule pid=37217 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146858.316:6934): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffec0c6e350 a2=0 a3=7ffec0c6e33c items=0 ppid=33621 pid=37217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146858.316:6934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146858.316:6935): table=filter:145 family=2 entries=20 op=nft_register_rule pid=37217 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146858.316:6935): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffec0c6e350 a2=0 a3=7ffec0c6e33c items=0 ppid=33621 pid=37217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146858.316:6935): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146888.306:6936): table=nat:146 family=10 entries=14 op=nft_register_rule pid=37270 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146888.306:6936): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffebaf8e970 a2=0 a3=7ffebaf8e95c items=0 ppid=33621 pid=37270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146888.306:6936): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146888.307:6937): table=filter:147 family=10 entries=20 op=nft_register_rule pid=37270 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146888.307:6937): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffebaf8e970 a2=0 a3=7ffebaf8e95c items=0 ppid=33621 pid=37270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146888.307:6937): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146888.388:6938): table=nat:148 family=2 entries=18 op=nft_register_rule pid=37323 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146888.388:6938): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff211e9ff0 a2=0 a3=7fff211e9fdc items=0 ppid=33621 pid=37323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146888.388:6938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146888.388:6939): table=filter:149 family=2 entries=20 op=nft_register_rule pid=37323 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146888.388:6939): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff211e9ff0 a2=0 a3=7fff211e9fdc items=0 ppid=33621 pid=37323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146888.388:6939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146918.379:6940): table=nat:150 family=10 entries=14 op=nft_register_rule pid=37392 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146918.379:6940): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcdadfd720 a2=0 a3=7ffcdadfd70c items=0 ppid=33621 pid=37392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146918.379:6940): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146918.380:6941): table=filter:151 family=10 entries=20 op=nft_register_rule pid=37392 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146918.380:6941): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcdadfd720 a2=0 a3=7ffcdadfd70c items=0 ppid=33621 pid=37392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146918.380:6941): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146918.454:6942): table=nat:152 family=2 entries=18 op=nft_register_rule pid=37445 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146918.454:6942): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffef1d2c6d0 a2=0 a3=7ffef1d2c6bc items=0 ppid=33621 pid=37445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146918.454:6942): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146918.455:6943): table=filter:153 family=2 entries=20 op=nft_register_rule pid=37445 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146918.455:6943): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef1d2c6d0 a2=0 a3=7ffef1d2c6bc items=0 ppid=33621 pid=37445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146918.455:6943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146948.445:6944): table=nat:154 family=10 entries=14 op=nft_register_rule pid=37498 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146948.445:6944): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe4a495400 a2=0 a3=7ffe4a4953ec items=0 ppid=33621 pid=37498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146948.445:6944): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146948.446:6945): table=filter:155 family=10 entries=20 op=nft_register_rule pid=37498 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146948.446:6945): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe4a495400 a2=0 a3=7ffe4a4953ec items=0 ppid=33621 pid=37498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146948.446:6945): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146948.524:6946): table=nat:156 family=2 entries=18 op=nft_register_rule pid=37552 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146948.524:6946): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffec3d3cc70 a2=0 a3=7ffec3d3cc5c items=0 ppid=33621 pid=37552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146948.524:6946): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146948.525:6947): table=filter:157 family=2 entries=20 op=nft_register_rule pid=37552 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146948.525:6947): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffec3d3cc70 a2=0 a3=7ffec3d3cc5c items=0 ppid=33621 pid=37552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146948.525:6947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146978.511:6948): table=nat:158 family=10 entries=14 op=nft_register_rule pid=37621 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146978.511:6948): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd0528fad0 a2=0 a3=7ffd0528fabc items=0 ppid=33621 pid=37621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146978.511:6948): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146978.512:6949): table=filter:159 family=10 entries=20 op=nft_register_rule pid=37621 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739146978.512:6949): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0528fad0 a2=0 a3=7ffd0528fabc items=0 ppid=33621 pid=37621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146978.512:6949): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146978.592:6950): table=nat:160 family=2 entries=18 op=nft_register_rule pid=37674 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146978.592:6950): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc47250b60 a2=0 a3=7ffc47250b4c items=0 ppid=33621 pid=37674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146978.592:6950): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739146978.592:6951): table=filter:161 family=2 entries=20 op=nft_register_rule pid=37674 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739146978.592:6951): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc47250b60 a2=0 a3=7ffc47250b4c items=0 ppid=33621 pid=37674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739146978.592:6951): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147008.581:6952): table=nat:162 family=10 entries=14 op=nft_register_rule pid=37728 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147008.581:6952): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe2be2b4b0 a2=0 a3=7ffe2be2b49c items=0 ppid=33621 pid=37728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147008.581:6952): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147008.581:6953): table=filter:163 family=10 entries=20 op=nft_register_rule pid=37728 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147008.581:6953): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe2be2b4b0 a2=0 a3=7ffe2be2b49c items=0 ppid=33621 pid=37728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147008.581:6953): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147008.669:6954): table=nat:164 family=2 entries=18 op=nft_register_rule pid=37781 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147008.669:6954): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdeeb81ce0 a2=0 a3=7ffdeeb81ccc items=0 ppid=33621 pid=37781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147008.669:6954): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147008.670:6955): table=filter:165 family=2 entries=20 op=nft_register_rule pid=37781 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147008.670:6955): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdeeb81ce0 a2=0 a3=7ffdeeb81ccc items=0 ppid=33621 pid=37781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147008.670:6955): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147038.649:6956): table=nat:166 family=10 entries=14 op=nft_register_rule pid=37851 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147038.649:6956): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffee61a5e70 a2=0 a3=7ffee61a5e5c items=0 ppid=33621 pid=37851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147038.649:6956): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147038.649:6957): table=filter:167 family=10 entries=20 op=nft_register_rule pid=37851 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147038.649:6957): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee61a5e70 a2=0 a3=7ffee61a5e5c items=0 ppid=33621 pid=37851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147038.649:6957): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147038.742:6958): table=nat:168 family=2 entries=18 op=nft_register_rule pid=37904 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147038.742:6958): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff3ac609c0 a2=0 a3=7fff3ac609ac items=0 ppid=33621 pid=37904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147038.742:6958): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147038.742:6959): table=filter:169 family=2 entries=20 op=nft_register_rule pid=37904 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147038.742:6959): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3ac609c0 a2=0 a3=7fff3ac609ac items=0 ppid=33621 pid=37904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147038.742:6959): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147068.715:6960): table=nat:170 family=10 entries=14 op=nft_register_rule pid=37958 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147068.715:6960): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcf849d5a0 a2=0 a3=7ffcf849d58c items=0 ppid=33621 pid=37958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147068.715:6960): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147068.716:6961): table=filter:171 family=10 entries=20 op=nft_register_rule pid=37958 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147068.716:6961): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcf849d5a0 a2=0 a3=7ffcf849d58c items=0 ppid=33621 pid=37958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147068.716:6961): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147068.814:6962): table=nat:172 family=2 entries=18 op=nft_register_rule pid=38011 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147068.814:6962): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff9a23e6b0 a2=0 a3=7fff9a23e69c items=0 ppid=33621 pid=38011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147068.814:6962): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147068.814:6963): table=filter:173 family=2 entries=20 op=nft_register_rule pid=38011 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147068.814:6963): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9a23e6b0 a2=0 a3=7fff9a23e69c items=0 ppid=33621 pid=38011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147068.814:6963): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147098.783:6964): table=nat:174 family=10 entries=14 op=nft_register_rule pid=38073 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147098.783:6964): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc83b222b0 a2=0 a3=7ffc83b2229c items=0 ppid=33621 pid=38073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147098.783:6964): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147098.784:6965): table=filter:175 family=10 entries=20 op=nft_register_rule pid=38073 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147098.784:6965): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc83b222b0 a2=0 a3=7ffc83b2229c items=0 ppid=33621 pid=38073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147098.784:6965): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147098.885:6966): table=nat:176 family=2 entries=18 op=nft_register_rule pid=38126 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147098.885:6966): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffed2fca000 a2=0 a3=7ffed2fc9fec items=0 ppid=33621 pid=38126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147098.885:6966): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147098.886:6967): table=filter:177 family=2 entries=20 op=nft_register_rule pid=38126 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147098.886:6967): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed2fca000 a2=0 a3=7ffed2fc9fec items=0 ppid=33621 pid=38126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147098.886:6967): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147128.854:6968): table=nat:178 family=10 entries=14 op=nft_register_rule pid=38187 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147128.854:6968): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd86fde740 a2=0 a3=7ffd86fde72c items=0 ppid=33621 pid=38187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147128.854:6968): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147128.854:6969): table=filter:179 family=10 entries=20 op=nft_register_rule pid=38187 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147128.854:6969): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd86fde740 a2=0 a3=7ffd86fde72c items=0 ppid=33621 pid=38187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147128.854:6969): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147128.957:6970): table=nat:180 family=2 entries=18 op=nft_register_rule pid=38241 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147128.957:6970): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff6991eed0 a2=0 a3=7fff6991eebc items=0 ppid=33621 pid=38241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147128.957:6970): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147128.958:6971): table=filter:181 family=2 entries=20 op=nft_register_rule pid=38241 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147128.958:6971): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff6991eed0 a2=0 a3=7fff6991eebc items=0 ppid=33621 pid=38241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147128.958:6971): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147158.935:6972): table=nat:182 family=10 entries=14 op=nft_register_rule pid=38310 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147158.935:6972): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffeb984a660 a2=0 a3=7ffeb984a64c items=0 ppid=33621 pid=38310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147158.935:6972): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147158.936:6973): table=filter:183 family=10 entries=20 op=nft_register_rule pid=38310 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147158.936:6973): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeb984a660 a2=0 a3=7ffeb984a64c items=0 ppid=33621 pid=38310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147158.936:6973): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147159.033:6974): table=nat:184 family=2 entries=18 op=nft_register_rule pid=38363 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147159.033:6974): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe51159e10 a2=0 a3=7ffe51159dfc items=0 ppid=33621 pid=38363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147159.033:6974): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147159.034:6975): table=filter:185 family=2 entries=20 op=nft_register_rule pid=38363 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147159.034:6975): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe51159e10 a2=0 a3=7ffe51159dfc items=0 ppid=33621 pid=38363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147159.034:6975): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147188.998:6976): table=nat:186 family=10 entries=14 op=nft_register_rule pid=38424 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147188.998:6976): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffafbcde50 a2=0 a3=7fffafbcde3c items=0 ppid=33621 pid=38424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147188.998:6976): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147188.998:6977): table=filter:187 family=10 entries=20 op=nft_register_rule pid=38424 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147188.998:6977): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffafbcde50 a2=0 a3=7fffafbcde3c items=0 ppid=33621 pid=38424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147188.998:6977): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147189.101:6978): table=nat:188 family=2 entries=18 op=nft_register_rule pid=38478 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147189.101:6978): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdf46915b0 a2=0 a3=7ffdf469159c items=0 ppid=33621 pid=38478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147189.101:6978): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147189.101:6979): table=filter:189 family=2 entries=20 op=nft_register_rule pid=38478 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147189.101:6979): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf46915b0 a2=0 a3=7ffdf469159c items=0 ppid=33621 pid=38478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147189.101:6979): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147219.064:6980): table=nat:190 family=10 entries=14 op=nft_register_rule pid=38540 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147219.064:6980): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe026ae430 a2=0 a3=7ffe026ae41c items=0 ppid=33621 pid=38540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147219.064:6980): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147219.064:6981): table=filter:191 family=10 entries=20 op=nft_register_rule pid=38540 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147219.064:6981): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe026ae430 a2=0 a3=7ffe026ae41c items=0 ppid=33621 pid=38540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147219.064:6981): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147219.169:6982): table=nat:192 family=2 entries=18 op=nft_register_rule pid=38593 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147219.169:6982): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd8541c250 a2=0 a3=7ffd8541c23c items=0 ppid=33621 pid=38593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147219.169:6982): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147219.170:6983): table=filter:193 family=2 entries=20 op=nft_register_rule pid=38593 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147219.170:6983): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd8541c250 a2=0 a3=7ffd8541c23c items=0 ppid=33621 pid=38593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147219.170:6983): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147249.137:6984): table=nat:194 family=10 entries=14 op=nft_register_rule pid=38653 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147249.137:6984): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd09e6c530 a2=0 a3=7ffd09e6c51c items=0 ppid=33621 pid=38653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147249.137:6984): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147249.138:6985): table=filter:195 family=10 entries=20 op=nft_register_rule pid=38653 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147249.138:6985): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd09e6c530 a2=0 a3=7ffd09e6c51c items=0 ppid=33621 pid=38653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147249.138:6985): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147249.239:6986): table=nat:196 family=2 entries=18 op=nft_register_rule pid=38706 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147249.239:6986): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff95e01470 a2=0 a3=7fff95e0145c items=0 ppid=33621 pid=38706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147249.239:6986): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147249.240:6987): table=filter:197 family=2 entries=20 op=nft_register_rule pid=38706 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147249.240:6987): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff95e01470 a2=0 a3=7fff95e0145c items=0 ppid=33621 pid=38706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147249.240:6987): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147279.203:6988): table=nat:198 family=10 entries=14 op=nft_register_rule pid=38769 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147279.203:6988): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffef3c1d750 a2=0 a3=7ffef3c1d73c items=0 ppid=33621 pid=38769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147279.203:6988): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147279.204:6989): table=filter:199 family=10 entries=20 op=nft_register_rule pid=38769 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147279.204:6989): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef3c1d750 a2=0 a3=7ffef3c1d73c items=0 ppid=33621 pid=38769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147279.204:6989): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147279.310:6990): table=nat:200 family=2 entries=18 op=nft_register_rule pid=38822 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147279.310:6990): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc69b1e500 a2=0 a3=7ffc69b1e4ec items=0 ppid=33621 pid=38822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147279.310:6990): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147279.311:6991): table=filter:201 family=2 entries=20 op=nft_register_rule pid=38822 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147279.311:6991): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc69b1e500 a2=0 a3=7ffc69b1e4ec items=0 ppid=33621 pid=38822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147279.311:6991): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147309.274:6992): table=nat:202 family=10 entries=14 op=nft_register_rule pid=38882 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147309.274:6992): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc7b53ee30 a2=0 a3=7ffc7b53ee1c items=0 ppid=33621 pid=38882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147309.274:6992): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147309.274:6993): table=filter:203 family=10 entries=20 op=nft_register_rule pid=38882 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147309.274:6993): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc7b53ee30 a2=0 a3=7ffc7b53ee1c items=0 ppid=33621 pid=38882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147309.274:6993): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147309.378:6994): table=nat:204 family=2 entries=18 op=nft_register_rule pid=38936 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147309.378:6994): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffed59d1670 a2=0 a3=7ffed59d165c items=0 ppid=33621 pid=38936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147309.378:6994): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147309.378:6995): table=filter:205 family=2 entries=20 op=nft_register_rule pid=38936 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147309.378:6995): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed59d1670 a2=0 a3=7ffed59d165c items=0 ppid=33621 pid=38936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147309.378:6995): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147339.344:6996): table=nat:206 family=10 entries=14 op=nft_register_rule pid=38998 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147339.344:6996): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff2b50dda0 a2=0 a3=7fff2b50dd8c items=0 ppid=33621 pid=38998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147339.344:6996): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147339.344:6997): table=filter:207 family=10 entries=20 op=nft_register_rule pid=38998 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147339.344:6997): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff2b50dda0 a2=0 a3=7fff2b50dd8c items=0 ppid=33621 pid=38998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147339.344:6997): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147339.445:6998): table=nat:208 family=2 entries=18 op=nft_register_rule pid=39051 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147339.445:6998): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1b8930a0 a2=0 a3=7ffe1b89308c items=0 ppid=33621 pid=39051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147339.445:6998): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147339.446:6999): table=filter:209 family=2 entries=20 op=nft_register_rule pid=39051 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147339.446:6999): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1b8930a0 a2=0 a3=7ffe1b89308c items=0 ppid=33621 pid=39051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147339.446:6999): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147369.409:7000): table=nat:210 family=10 entries=14 op=nft_register_rule pid=39104 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147369.409:7000): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc35874170 a2=0 a3=7ffc3587415c items=0 ppid=33621 pid=39104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147369.409:7000): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147369.410:7001): table=filter:211 family=10 entries=20 op=nft_register_rule pid=39104 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147369.410:7001): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc35874170 a2=0 a3=7ffc3587415c items=0 ppid=33621 pid=39104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147369.410:7001): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147369.512:7002): table=nat:212 family=2 entries=18 op=nft_register_rule pid=39157 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147369.512:7002): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffbcf95580 a2=0 a3=7fffbcf9556c items=0 ppid=33621 pid=39157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147369.512:7002): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147369.513:7003): table=filter:213 family=2 entries=20 op=nft_register_rule pid=39157 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147369.513:7003): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffbcf95580 a2=0 a3=7fffbcf9556c items=0 ppid=33621 pid=39157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147369.513:7003): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147399.483:7004): table=nat:214 family=10 entries=14 op=nft_register_rule pid=39226 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147399.483:7004): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcd8a2bff0 a2=0 a3=7ffcd8a2bfdc items=0 ppid=33621 pid=39226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147399.483:7004): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147399.484:7005): table=filter:215 family=10 entries=20 op=nft_register_rule pid=39226 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147399.484:7005): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcd8a2bff0 a2=0 a3=7ffcd8a2bfdc items=0 ppid=33621 pid=39226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147399.484:7005): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147399.595:7006): table=nat:216 family=2 entries=18 op=nft_register_rule pid=39279 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147399.595:7006): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc851e02c0 a2=0 a3=7ffc851e02ac items=0 ppid=33621 pid=39279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147399.595:7006): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147399.596:7007): table=filter:217 family=2 entries=20 op=nft_register_rule pid=39279 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147399.596:7007): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc851e02c0 a2=0 a3=7ffc851e02ac items=0 ppid=33621 pid=39279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147399.596:7007): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147429.546:7008): table=nat:218 family=10 entries=14 op=nft_register_rule pid=39333 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147429.546:7008): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd8d302590 a2=0 a3=7ffd8d30257c items=0 ppid=33621 pid=39333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147429.546:7008): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147429.547:7009): table=filter:219 family=10 entries=20 op=nft_register_rule pid=39333 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147429.547:7009): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd8d302590 a2=0 a3=7ffd8d30257c items=0 ppid=33621 pid=39333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147429.547:7009): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147429.662:7010): table=nat:220 family=2 entries=18 op=nft_register_rule pid=39386 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147429.662:7010): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffff377fed0 a2=0 a3=7ffff377febc items=0 ppid=33621 pid=39386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147429.662:7010): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147429.663:7011): table=filter:221 family=2 entries=20 op=nft_register_rule pid=39386 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147429.663:7011): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffff377fed0 a2=0 a3=7ffff377febc items=0 ppid=33621 pid=39386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147429.663:7011): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147459.611:7012): table=nat:222 family=10 entries=14 op=nft_register_rule pid=39463 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147459.611:7012): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffed844de80 a2=0 a3=7ffed844de6c items=0 ppid=33621 pid=39463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147459.611:7012): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147459.611:7013): table=filter:223 family=10 entries=20 op=nft_register_rule pid=39463 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147459.611:7013): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed844de80 a2=0 a3=7ffed844de6c items=0 ppid=33621 pid=39463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147459.611:7013): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147459.729:7014): table=nat:224 family=2 entries=18 op=nft_register_rule pid=39516 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147459.729:7014): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffda3bafab0 a2=0 a3=7ffda3bafa9c items=0 ppid=33621 pid=39516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147459.729:7014): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147459.729:7015): table=filter:225 family=2 entries=20 op=nft_register_rule pid=39516 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147459.729:7015): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffda3bafab0 a2=0 a3=7ffda3bafa9c items=0 ppid=33621 pid=39516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147459.729:7015): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147489.677:7016): table=nat:226 family=10 entries=14 op=nft_register_rule pid=39570 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147489.677:7016): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffe0406240 a2=0 a3=7fffe040622c items=0 ppid=33621 pid=39570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147489.677:7016): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147489.678:7017): table=filter:227 family=10 entries=20 op=nft_register_rule pid=39570 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147489.678:7017): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe0406240 a2=0 a3=7fffe040622c items=0 ppid=33621 pid=39570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147489.678:7017): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147489.796:7018): table=nat:228 family=2 entries=18 op=nft_register_rule pid=39623 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147489.796:7018): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd4cac1990 a2=0 a3=7ffd4cac197c items=0 ppid=33621 pid=39623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147489.796:7018): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147489.797:7019): table=filter:229 family=2 entries=20 op=nft_register_rule pid=39623 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147489.797:7019): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd4cac1990 a2=0 a3=7ffd4cac197c items=0 ppid=33621 pid=39623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147489.797:7019): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147519.748:7020): table=nat:230 family=10 entries=14 op=nft_register_rule pid=39692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147519.748:7020): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe03d50570 a2=0 a3=7ffe03d5055c items=0 ppid=33621 pid=39692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147519.748:7020): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147519.748:7021): table=filter:231 family=10 entries=20 op=nft_register_rule pid=39692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147519.748:7021): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe03d50570 a2=0 a3=7ffe03d5055c items=0 ppid=33621 pid=39692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147519.748:7021): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147519.861:7022): table=nat:232 family=2 entries=18 op=nft_register_rule pid=39746 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147519.861:7022): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffed7f8ae40 a2=0 a3=7ffed7f8ae2c items=0 ppid=33621 pid=39746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147519.861:7022): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147519.861:7023): table=filter:233 family=2 entries=20 op=nft_register_rule pid=39746 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147519.861:7023): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed7f8ae40 a2=0 a3=7ffed7f8ae2c items=0 ppid=33621 pid=39746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147519.861:7023): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147549.817:7024): table=nat:234 family=10 entries=14 op=nft_register_rule pid=39799 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147549.817:7024): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffeb55109e0 a2=0 a3=7ffeb55109cc items=0 ppid=33621 pid=39799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147549.817:7024): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147549.818:7025): table=filter:235 family=10 entries=20 op=nft_register_rule pid=39799 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147549.818:7025): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeb55109e0 a2=0 a3=7ffeb55109cc items=0 ppid=33621 pid=39799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147549.818:7025): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147549.931:7026): table=nat:236 family=2 entries=18 op=nft_register_rule pid=39852 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147549.931:7026): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc3b2cc4d0 a2=0 a3=7ffc3b2cc4bc items=0 ppid=33621 pid=39852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147549.931:7026): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147549.931:7027): table=filter:237 family=2 entries=20 op=nft_register_rule pid=39852 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147549.931:7027): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc3b2cc4d0 a2=0 a3=7ffc3b2cc4bc items=0 ppid=33621 pid=39852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147549.931:7027): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147579.885:7028): table=nat:238 family=10 entries=14 op=nft_register_rule pid=39922 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147579.885:7028): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff71de10f0 a2=0 a3=7fff71de10dc items=0 ppid=33621 pid=39922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147579.885:7028): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147579.885:7029): table=filter:239 family=10 entries=20 op=nft_register_rule pid=39922 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147579.885:7029): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff71de10f0 a2=0 a3=7fff71de10dc items=0 ppid=33621 pid=39922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147579.885:7029): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147579.998:7030): table=nat:240 family=2 entries=18 op=nft_register_rule pid=39975 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147579.998:7030): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdeb55a8c0 a2=0 a3=7ffdeb55a8ac items=0 ppid=33621 pid=39975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147579.998:7030): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147579.998:7031): table=filter:241 family=2 entries=20 op=nft_register_rule pid=39975 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147579.998:7031): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdeb55a8c0 a2=0 a3=7ffdeb55a8ac items=0 ppid=33621 pid=39975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147579.998:7031): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147609.961:7032): table=nat:242 family=10 entries=14 op=nft_register_rule pid=40028 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147609.961:7032): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffccbe3af20 a2=0 a3=7ffccbe3af0c items=0 ppid=33621 pid=40028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147609.961:7032): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147609.962:7033): table=filter:243 family=10 entries=20 op=nft_register_rule pid=40028 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147609.962:7033): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffccbe3af20 a2=0 a3=7ffccbe3af0c items=0 ppid=33621 pid=40028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147609.962:7033): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147610.063:7034): table=nat:244 family=2 entries=18 op=nft_register_rule pid=40081 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147610.063:7034): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd799936e0 a2=0 a3=7ffd799936cc items=0 ppid=33621 pid=40081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147610.063:7034): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147610.063:7035): table=filter:245 family=2 entries=20 op=nft_register_rule pid=40081 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147610.063:7035): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd799936e0 a2=0 a3=7ffd799936cc items=0 ppid=33621 pid=40081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147610.063:7035): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147640.032:7036): table=nat:246 family=10 entries=14 op=nft_register_rule pid=40150 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147640.032:7036): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff4cd52980 a2=0 a3=7fff4cd5296c items=0 ppid=33621 pid=40150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147640.032:7036): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147640.033:7037): table=filter:247 family=10 entries=20 op=nft_register_rule pid=40150 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147640.033:7037): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4cd52980 a2=0 a3=7fff4cd5296c items=0 ppid=33621 pid=40150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147640.033:7037): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147640.128:7038): table=nat:248 family=2 entries=18 op=nft_register_rule pid=40203 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147640.128:7038): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff6d45e280 a2=0 a3=7fff6d45e26c items=0 ppid=33621 pid=40203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147640.128:7038): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147640.128:7039): table=filter:249 family=2 entries=20 op=nft_register_rule pid=40203 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147640.128:7039): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff6d45e280 a2=0 a3=7fff6d45e26c items=0 ppid=33621 pid=40203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147640.128:7039): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147670.105:7040): table=nat:250 family=10 entries=14 op=nft_register_rule pid=40256 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147670.105:7040): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc6f776d80 a2=0 a3=7ffc6f776d6c items=0 ppid=33621 pid=40256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147670.105:7040): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147670.106:7041): table=filter:251 family=10 entries=20 op=nft_register_rule pid=40256 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147670.106:7041): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc6f776d80 a2=0 a3=7ffc6f776d6c items=0 ppid=33621 pid=40256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147670.106:7041): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147670.194:7042): table=nat:252 family=2 entries=18 op=nft_register_rule pid=40309 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147670.194:7042): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff3b133fe0 a2=0 a3=7fff3b133fcc items=0 ppid=33621 pid=40309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147670.194:7042): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147670.195:7043): table=filter:253 family=2 entries=20 op=nft_register_rule pid=40309 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147670.195:7043): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3b133fe0 a2=0 a3=7fff3b133fcc items=0 ppid=33621 pid=40309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147670.195:7043): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147700.166:7044): table=nat:254 family=10 entries=14 op=nft_register_rule pid=40372 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147700.166:7044): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe73d56d10 a2=0 a3=7ffe73d56cfc items=0 ppid=33621 pid=40372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147700.166:7044): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147700.166:7045): table=filter:255 family=10 entries=20 op=nft_register_rule pid=40372 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147700.166:7045): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe73d56d10 a2=0 a3=7ffe73d56cfc items=0 ppid=33621 pid=40372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147700.166:7045): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147700.264:7046): table=nat:256 family=2 entries=18 op=nft_register_rule pid=40425 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147700.264:7046): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffed8d81810 a2=0 a3=7ffed8d817fc items=0 ppid=33621 pid=40425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147700.264:7046): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147700.264:7047): table=filter:257 family=2 entries=20 op=nft_register_rule pid=40425 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147700.264:7047): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed8d81810 a2=0 a3=7ffed8d817fc items=0 ppid=33621 pid=40425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147700.264:7047): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147730.239:7048): table=nat:258 family=10 entries=14 op=nft_register_rule pid=40485 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147730.239:7048): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc4df0d030 a2=0 a3=7ffc4df0d01c items=0 ppid=33621 pid=40485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147730.239:7048): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147730.240:7049): table=filter:259 family=10 entries=20 op=nft_register_rule pid=40485 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147730.240:7049): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc4df0d030 a2=0 a3=7ffc4df0d01c items=0 ppid=33621 pid=40485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147730.240:7049): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147730.337:7050): table=nat:260 family=2 entries=18 op=nft_register_rule pid=40538 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147730.337:7050): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe92872f20 a2=0 a3=7ffe92872f0c items=0 ppid=33621 pid=40538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147730.337:7050): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147730.337:7051): table=filter:261 family=2 entries=20 op=nft_register_rule pid=40538 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147730.337:7051): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe92872f20 a2=0 a3=7ffe92872f0c items=0 ppid=33621 pid=40538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147730.337:7051): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147760.306:7052): table=nat:262 family=10 entries=14 op=nft_register_rule pid=40608 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147760.306:7052): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffca2c79be0 a2=0 a3=7ffca2c79bcc items=0 ppid=33621 pid=40608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147760.306:7052): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147760.307:7053): table=filter:263 family=10 entries=20 op=nft_register_rule pid=40608 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147760.307:7053): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca2c79be0 a2=0 a3=7ffca2c79bcc items=0 ppid=33621 pid=40608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147760.307:7053): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147760.404:7054): table=nat:264 family=2 entries=18 op=nft_register_rule pid=40661 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147760.404:7054): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe8cadaff0 a2=0 a3=7ffe8cadafdc items=0 ppid=33621 pid=40661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147760.404:7054): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147760.405:7055): table=filter:265 family=2 entries=20 op=nft_register_rule pid=40661 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147760.405:7055): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8cadaff0 a2=0 a3=7ffe8cadafdc items=0 ppid=33621 pid=40661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147760.405:7055): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147790.372:7056): table=nat:266 family=10 entries=14 op=nft_register_rule pid=40721 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147790.372:7056): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdb0fd5ea0 a2=0 a3=7ffdb0fd5e8c items=0 ppid=33621 pid=40721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147790.372:7056): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147790.373:7057): table=filter:267 family=10 entries=20 op=nft_register_rule pid=40721 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147790.373:7057): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb0fd5ea0 a2=0 a3=7ffdb0fd5e8c items=0 ppid=33621 pid=40721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147790.373:7057): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147790.474:7058): table=nat:268 family=2 entries=18 op=nft_register_rule pid=40775 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147790.474:7058): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe2985bb10 a2=0 a3=7ffe2985bafc items=0 ppid=33621 pid=40775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147790.474:7058): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147790.474:7059): table=filter:269 family=2 entries=20 op=nft_register_rule pid=40775 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147790.474:7059): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe2985bb10 a2=0 a3=7ffe2985bafc items=0 ppid=33621 pid=40775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147790.474:7059): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147820.439:7060): table=nat:270 family=10 entries=14 op=nft_register_rule pid=40837 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147820.439:7060): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc756e2da0 a2=0 a3=7ffc756e2d8c items=0 ppid=33621 pid=40837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147820.439:7060): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147820.440:7061): table=filter:271 family=10 entries=20 op=nft_register_rule pid=40837 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147820.440:7061): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc756e2da0 a2=0 a3=7ffc756e2d8c items=0 ppid=33621 pid=40837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147820.440:7061): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147820.548:7062): table=nat:272 family=2 entries=18 op=nft_register_rule pid=40890 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147820.548:7062): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffee5713f20 a2=0 a3=7ffee5713f0c items=0 ppid=33621 pid=40890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147820.548:7062): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147820.548:7063): table=filter:273 family=2 entries=20 op=nft_register_rule pid=40890 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147820.548:7063): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee5713f20 a2=0 a3=7ffee5713f0c items=0 ppid=33621 pid=40890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147820.548:7063): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147850.510:7064): table=nat:274 family=10 entries=14 op=nft_register_rule pid=40951 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147850.510:7064): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffed929d9b0 a2=0 a3=7ffed929d99c items=0 ppid=33621 pid=40951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147850.510:7064): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147850.510:7065): table=filter:275 family=10 entries=20 op=nft_register_rule pid=40951 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147850.510:7065): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed929d9b0 a2=0 a3=7ffed929d99c items=0 ppid=33621 pid=40951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147850.510:7065): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147850.620:7066): table=nat:276 family=2 entries=18 op=nft_register_rule pid=41004 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147850.620:7066): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa6a243f0 a2=0 a3=7fffa6a243dc items=0 ppid=33621 pid=41004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147850.620:7066): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147850.621:7067): table=filter:277 family=2 entries=20 op=nft_register_rule pid=41004 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147850.621:7067): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa6a243f0 a2=0 a3=7fffa6a243dc items=0 ppid=33621 pid=41004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147850.621:7067): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147880.579:7068): table=nat:278 family=10 entries=14 op=nft_register_rule pid=41067 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147880.579:7068): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc66c2df80 a2=0 a3=7ffc66c2df6c items=0 ppid=33621 pid=41067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147880.579:7068): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147880.580:7069): table=filter:279 family=10 entries=20 op=nft_register_rule pid=41067 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147880.580:7069): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc66c2df80 a2=0 a3=7ffc66c2df6c items=0 ppid=33621 pid=41067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147880.580:7069): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147880.694:7070): table=nat:280 family=2 entries=18 op=nft_register_rule pid=41120 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147880.694:7070): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc93122bd0 a2=0 a3=7ffc93122bbc items=0 ppid=33621 pid=41120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147880.694:7070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147880.695:7071): table=filter:281 family=2 entries=20 op=nft_register_rule pid=41120 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147880.695:7071): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc93122bd0 a2=0 a3=7ffc93122bbc items=0 ppid=33621 pid=41120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147880.695:7071): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147910.648:7072): table=nat:282 family=10 entries=14 op=nft_register_rule pid=41180 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147910.648:7072): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd00c8e2a0 a2=0 a3=7ffd00c8e28c items=0 ppid=33621 pid=41180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147910.648:7072): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147910.648:7073): table=filter:283 family=10 entries=20 op=nft_register_rule pid=41180 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147910.648:7073): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd00c8e2a0 a2=0 a3=7ffd00c8e28c items=0 ppid=33621 pid=41180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147910.648:7073): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147910.759:7074): table=nat:284 family=2 entries=18 op=nft_register_rule pid=41233 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147910.759:7074): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe79328a20 a2=0 a3=7ffe79328a0c items=0 ppid=33621 pid=41233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147910.759:7074): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147910.760:7075): table=filter:285 family=2 entries=20 op=nft_register_rule pid=41233 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147910.760:7075): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe79328a20 a2=0 a3=7ffe79328a0c items=0 ppid=33621 pid=41233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147910.760:7075): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147940.720:7076): table=nat:286 family=10 entries=14 op=nft_register_rule pid=41295 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147940.720:7076): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd2ae42cb0 a2=0 a3=7ffd2ae42c9c items=0 ppid=33621 pid=41295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147940.720:7076): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147940.721:7077): table=filter:287 family=10 entries=20 op=nft_register_rule pid=41295 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147940.721:7077): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd2ae42cb0 a2=0 a3=7ffd2ae42c9c items=0 ppid=33621 pid=41295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147940.721:7077): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147940.831:7078): table=nat:288 family=2 entries=18 op=nft_register_rule pid=41348 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147940.831:7078): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc0fc75790 a2=0 a3=7ffc0fc7577c items=0 ppid=33621 pid=41348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147940.831:7078): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147940.832:7079): table=filter:289 family=2 entries=20 op=nft_register_rule pid=41348 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147940.832:7079): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc0fc75790 a2=0 a3=7ffc0fc7577c items=0 ppid=33621 pid=41348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147940.832:7079): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147970.783:7080): table=nat:290 family=10 entries=14 op=nft_register_rule pid=41408 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147970.783:7080): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdcb0dec80 a2=0 a3=7ffdcb0dec6c items=0 ppid=33621 pid=41408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147970.783:7080): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147970.784:7081): table=filter:291 family=10 entries=20 op=nft_register_rule pid=41408 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739147970.784:7081): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcb0dec80 a2=0 a3=7ffdcb0dec6c items=0 ppid=33621 pid=41408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147970.784:7081): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147970.904:7082): table=nat:292 family=2 entries=18 op=nft_register_rule pid=41462 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147970.904:7082): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffca3e16a50 a2=0 a3=7ffca3e16a3c items=0 ppid=33621 pid=41462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147970.904:7082): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739147970.905:7083): table=filter:293 family=2 entries=20 op=nft_register_rule pid=41462 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739147970.905:7083): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca3e16a50 a2=0 a3=7ffca3e16a3c items=0 ppid=33621 pid=41462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739147970.905:7083): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148000.853:7084): table=nat:294 family=10 entries=14 op=nft_register_rule pid=41524 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148000.853:7084): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe7fc8d220 a2=0 a3=7ffe7fc8d20c items=0 ppid=33621 pid=41524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148000.853:7084): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148000.854:7085): table=filter:295 family=10 entries=20 op=nft_register_rule pid=41524 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148000.854:7085): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7fc8d220 a2=0 a3=7ffe7fc8d20c items=0 ppid=33621 pid=41524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148000.854:7085): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148000.971:7086): table=nat:296 family=2 entries=18 op=nft_register_rule pid=41577 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148000.971:7086): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd395e9080 a2=0 a3=7ffd395e906c items=0 ppid=33621 pid=41577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148000.971:7086): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148000.971:7087): table=filter:297 family=2 entries=20 op=nft_register_rule pid=41577 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148000.971:7087): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd395e9080 a2=0 a3=7ffd395e906c items=0 ppid=33621 pid=41577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148000.971:7087): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148030.922:7088): table=nat:298 family=10 entries=14 op=nft_register_rule pid=41630 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148030.922:7088): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc3817f360 a2=0 a3=7ffc3817f34c items=0 ppid=33621 pid=41630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148030.922:7088): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148030.922:7089): table=filter:299 family=10 entries=20 op=nft_register_rule pid=41630 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148030.922:7089): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc3817f360 a2=0 a3=7ffc3817f34c items=0 ppid=33621 pid=41630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148030.922:7089): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148031.037:7090): table=nat:300 family=2 entries=18 op=nft_register_rule pid=41683 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148031.037:7090): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd9348ef50 a2=0 a3=7ffd9348ef3c items=0 ppid=33621 pid=41683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148031.037:7090): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148031.038:7091): table=filter:301 family=2 entries=20 op=nft_register_rule pid=41683 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148031.038:7091): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd9348ef50 a2=0 a3=7ffd9348ef3c items=0 ppid=33621 pid=41683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148031.038:7091): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148060.985:7092): table=nat:302 family=10 entries=14 op=nft_register_rule pid=41759 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148060.985:7092): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdcb66b2f0 a2=0 a3=7ffdcb66b2dc items=0 ppid=33621 pid=41759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148060.985:7092): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148060.985:7093): table=filter:303 family=10 entries=20 op=nft_register_rule pid=41759 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148060.985:7093): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcb66b2f0 a2=0 a3=7ffdcb66b2dc items=0 ppid=33621 pid=41759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148060.985:7093): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148061.104:7094): table=nat:304 family=2 entries=18 op=nft_register_rule pid=41812 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148061.104:7094): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdcf2d7640 a2=0 a3=7ffdcf2d762c items=0 ppid=33621 pid=41812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148061.104:7094): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148061.104:7095): table=filter:305 family=2 entries=20 op=nft_register_rule pid=41812 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148061.104:7095): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcf2d7640 a2=0 a3=7ffdcf2d762c items=0 ppid=33621 pid=41812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148061.104:7095): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148091.049:7096): table=nat:306 family=10 entries=14 op=nft_register_rule pid=41865 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148091.049:7096): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdf3c9fa10 a2=0 a3=7ffdf3c9f9fc items=0 ppid=33621 pid=41865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148091.049:7096): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148091.050:7097): table=filter:307 family=10 entries=20 op=nft_register_rule pid=41865 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148091.050:7097): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf3c9fa10 a2=0 a3=7ffdf3c9f9fc items=0 ppid=33621 pid=41865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148091.050:7097): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148091.168:7098): table=nat:308 family=2 entries=18 op=nft_register_rule pid=41918 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148091.168:7098): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcd09fd540 a2=0 a3=7ffcd09fd52c items=0 ppid=33621 pid=41918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148091.168:7098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148091.169:7099): table=filter:309 family=2 entries=20 op=nft_register_rule pid=41918 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148091.169:7099): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcd09fd540 a2=0 a3=7ffcd09fd52c items=0 ppid=33621 pid=41918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148091.169:7099): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148121.123:7100): table=nat:310 family=10 entries=14 op=nft_register_rule pid=41989 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148121.123:7100): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe9fb61e50 a2=0 a3=7ffe9fb61e3c items=0 ppid=33621 pid=41989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148121.123:7100): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148121.124:7101): table=filter:311 family=10 entries=20 op=nft_register_rule pid=41989 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148121.124:7101): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9fb61e50 a2=0 a3=7ffe9fb61e3c items=0 ppid=33621 pid=41989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148121.124:7101): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148121.239:7102): table=nat:312 family=2 entries=18 op=nft_register_rule pid=42042 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148121.239:7102): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc462961f0 a2=0 a3=7ffc462961dc items=0 ppid=33621 pid=42042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148121.239:7102): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148121.240:7103): table=filter:313 family=2 entries=20 op=nft_register_rule pid=42042 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148121.240:7103): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc462961f0 a2=0 a3=7ffc462961dc items=0 ppid=33621 pid=42042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148121.240:7103): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148151.187:7104): table=nat:314 family=10 entries=14 op=nft_register_rule pid=42095 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148151.187:7104): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdde415f30 a2=0 a3=7ffdde415f1c items=0 ppid=33621 pid=42095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148151.187:7104): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148151.187:7105): table=filter:315 family=10 entries=20 op=nft_register_rule pid=42095 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148151.187:7105): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdde415f30 a2=0 a3=7ffdde415f1c items=0 ppid=33621 pid=42095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148151.187:7105): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148151.304:7106): table=nat:316 family=2 entries=18 op=nft_register_rule pid=42149 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148151.304:7106): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffedec5f420 a2=0 a3=7ffedec5f40c items=0 ppid=33621 pid=42149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148151.304:7106): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148151.305:7107): table=filter:317 family=2 entries=20 op=nft_register_rule pid=42149 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148151.305:7107): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffedec5f420 a2=0 a3=7ffedec5f40c items=0 ppid=33621 pid=42149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148151.305:7107): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148181.245:7108): table=nat:318 family=10 entries=14 op=nft_register_rule pid=42218 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148181.245:7108): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff91c9bf80 a2=0 a3=7fff91c9bf6c items=0 ppid=33621 pid=42218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148181.245:7108): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148181.246:7109): table=filter:319 family=10 entries=20 op=nft_register_rule pid=42218 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148181.246:7109): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff91c9bf80 a2=0 a3=7fff91c9bf6c items=0 ppid=33621 pid=42218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148181.246:7109): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148181.376:7110): table=nat:320 family=2 entries=18 op=nft_register_rule pid=42272 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148181.376:7110): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd22ac1fb0 a2=0 a3=7ffd22ac1f9c items=0 ppid=33621 pid=42272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148181.376:7110): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148181.376:7111): table=filter:321 family=2 entries=20 op=nft_register_rule pid=42272 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148181.376:7111): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd22ac1fb0 a2=0 a3=7ffd22ac1f9c items=0 ppid=33621 pid=42272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148181.376:7111): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148211.319:7112): table=nat:322 family=10 entries=14 op=nft_register_rule pid=42325 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148211.319:7112): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdf322d8b0 a2=0 a3=7ffdf322d89c items=0 ppid=33621 pid=42325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148211.319:7112): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148211.319:7113): table=filter:323 family=10 entries=20 op=nft_register_rule pid=42325 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148211.319:7113): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf322d8b0 a2=0 a3=7ffdf322d89c items=0 ppid=33621 pid=42325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148211.319:7113): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148211.447:7114): table=nat:324 family=2 entries=18 op=nft_register_rule pid=42378 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148211.447:7114): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe9f10ea40 a2=0 a3=7ffe9f10ea2c items=0 ppid=33621 pid=42378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148211.447:7114): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148211.448:7115): table=filter:325 family=2 entries=20 op=nft_register_rule pid=42378 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148211.448:7115): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9f10ea40 a2=0 a3=7ffe9f10ea2c items=0 ppid=33621 pid=42378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148211.448:7115): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148241.391:7116): table=nat:326 family=10 entries=14 op=nft_register_rule pid=42447 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148241.391:7116): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc6a1b1010 a2=0 a3=7ffc6a1b0ffc items=0 ppid=33621 pid=42447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148241.391:7116): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148241.391:7117): table=filter:327 family=10 entries=20 op=nft_register_rule pid=42447 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148241.391:7117): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc6a1b1010 a2=0 a3=7ffc6a1b0ffc items=0 ppid=33621 pid=42447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148241.391:7117): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148241.515:7118): table=nat:328 family=2 entries=18 op=nft_register_rule pid=42500 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148241.515:7118): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdfeae8040 a2=0 a3=7ffdfeae802c items=0 ppid=33621 pid=42500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148241.515:7118): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148241.515:7119): table=filter:329 family=2 entries=20 op=nft_register_rule pid=42500 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148241.515:7119): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdfeae8040 a2=0 a3=7ffdfeae802c items=0 ppid=33621 pid=42500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148241.515:7119): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148271.456:7120): table=nat:330 family=10 entries=14 op=nft_register_rule pid=42553 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148271.456:7120): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe49072980 a2=0 a3=7ffe4907296c items=0 ppid=33621 pid=42553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148271.456:7120): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148271.456:7121): table=filter:331 family=10 entries=20 op=nft_register_rule pid=42553 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148271.456:7121): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe49072980 a2=0 a3=7ffe4907296c items=0 ppid=33621 pid=42553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148271.456:7121): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148271.586:7122): table=nat:332 family=2 entries=18 op=nft_register_rule pid=42607 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148271.586:7122): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff114b5110 a2=0 a3=7fff114b50fc items=0 ppid=33621 pid=42607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148271.586:7122): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148271.586:7123): table=filter:333 family=2 entries=20 op=nft_register_rule pid=42607 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148271.586:7123): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff114b5110 a2=0 a3=7fff114b50fc items=0 ppid=33621 pid=42607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148271.586:7123): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_START msg=audit(1739148288.213:7124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739148288.213:7125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739148301.522:7126): table=nat:334 family=10 entries=14 op=nft_register_rule pid=42690 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148301.522:7126): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffa53dff80 a2=0 a3=7fffa53dff6c items=0 ppid=33621 pid=42690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148301.522:7126): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148301.523:7127): table=filter:335 family=10 entries=20 op=nft_register_rule pid=42690 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148301.523:7127): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa53dff80 a2=0 a3=7fffa53dff6c items=0 ppid=33621 pid=42690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148301.523:7127): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148301.656:7128): table=nat:336 family=2 entries=18 op=nft_register_rule pid=42743 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148301.656:7128): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcc9e7ebe0 a2=0 a3=7ffcc9e7ebcc items=0 ppid=33621 pid=42743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148301.656:7128): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148301.656:7129): table=filter:337 family=2 entries=20 op=nft_register_rule pid=42743 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148301.656:7129): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcc9e7ebe0 a2=0 a3=7ffcc9e7ebcc items=0 ppid=33621 pid=42743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148301.656:7129): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148331.586:7130): table=nat:338 family=10 entries=14 op=nft_register_rule pid=42796 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148331.586:7130): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff77733f30 a2=0 a3=7fff77733f1c items=0 ppid=33621 pid=42796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148331.586:7130): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148331.587:7131): table=filter:339 family=10 entries=20 op=nft_register_rule pid=42796 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148331.587:7131): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff77733f30 a2=0 a3=7fff77733f1c items=0 ppid=33621 pid=42796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148331.587:7131): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148331.724:7132): table=nat:340 family=2 entries=18 op=nft_register_rule pid=42849 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148331.724:7132): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe93ac9a00 a2=0 a3=7ffe93ac99ec items=0 ppid=33621 pid=42849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148331.724:7132): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148331.725:7133): table=filter:341 family=2 entries=20 op=nft_register_rule pid=42849 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148331.725:7133): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe93ac9a00 a2=0 a3=7ffe93ac99ec items=0 ppid=33621 pid=42849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148331.725:7133): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148361.662:7134): table=nat:342 family=10 entries=14 op=nft_register_rule pid=42919 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148361.662:7134): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff4eda8d00 a2=0 a3=7fff4eda8cec items=0 ppid=33621 pid=42919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148361.662:7134): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148361.663:7135): table=filter:343 family=10 entries=20 op=nft_register_rule pid=42919 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148361.663:7135): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4eda8d00 a2=0 a3=7fff4eda8cec items=0 ppid=33621 pid=42919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148361.663:7135): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148361.791:7136): table=nat:344 family=2 entries=18 op=nft_register_rule pid=42972 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148361.791:7136): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcab722230 a2=0 a3=7ffcab72221c items=0 ppid=33621 pid=42972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148361.791:7136): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148361.791:7137): table=filter:345 family=2 entries=20 op=nft_register_rule pid=42972 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148361.791:7137): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcab722230 a2=0 a3=7ffcab72221c items=0 ppid=33621 pid=42972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148361.791:7137): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148391.734:7138): table=nat:346 family=10 entries=14 op=nft_register_rule pid=43033 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148391.734:7138): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd18387280 a2=0 a3=7ffd1838726c items=0 ppid=33621 pid=43033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148391.734:7138): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148391.735:7139): table=filter:347 family=10 entries=20 op=nft_register_rule pid=43033 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148391.735:7139): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd18387280 a2=0 a3=7ffd1838726c items=0 ppid=33621 pid=43033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148391.735:7139): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148391.857:7140): table=nat:348 family=2 entries=18 op=nft_register_rule pid=43086 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148391.857:7140): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcda110fe0 a2=0 a3=7ffcda110fcc items=0 ppid=33621 pid=43086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148391.857:7140): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148391.857:7141): table=filter:349 family=2 entries=20 op=nft_register_rule pid=43086 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148391.857:7141): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcda110fe0 a2=0 a3=7ffcda110fcc items=0 ppid=33621 pid=43086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148391.857:7141): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148421.806:7142): table=nat:350 family=10 entries=14 op=nft_register_rule pid=43149 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148421.806:7142): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc3f963670 a2=0 a3=7ffc3f96365c items=0 ppid=33621 pid=43149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148421.806:7142): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148421.806:7143): table=filter:351 family=10 entries=20 op=nft_register_rule pid=43149 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148421.806:7143): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc3f963670 a2=0 a3=7ffc3f96365c items=0 ppid=33621 pid=43149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148421.806:7143): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148421.924:7144): table=nat:352 family=2 entries=18 op=nft_register_rule pid=43202 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148421.924:7144): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff89f7dc20 a2=0 a3=7fff89f7dc0c items=0 ppid=33621 pid=43202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148421.924:7144): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148421.924:7145): table=filter:353 family=2 entries=20 op=nft_register_rule pid=43202 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148421.924:7145): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff89f7dc20 a2=0 a3=7fff89f7dc0c items=0 ppid=33621 pid=43202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148421.924:7145): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148451.882:7146): table=nat:354 family=10 entries=14 op=nft_register_rule pid=43262 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148451.882:7146): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffed7f540a0 a2=0 a3=7ffed7f5408c items=0 ppid=33621 pid=43262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148451.882:7146): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148451.883:7147): table=filter:355 family=10 entries=20 op=nft_register_rule pid=43262 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148451.883:7147): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed7f540a0 a2=0 a3=7ffed7f5408c items=0 ppid=33621 pid=43262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148451.883:7147): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148451.992:7148): table=nat:356 family=2 entries=18 op=nft_register_rule pid=43315 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148451.992:7148): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa2c98850 a2=0 a3=7fffa2c9883c items=0 ppid=33621 pid=43315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148451.992:7148): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148451.993:7149): table=filter:357 family=2 entries=20 op=nft_register_rule pid=43315 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148451.993:7149): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa2c98850 a2=0 a3=7fffa2c9883c items=0 ppid=33621 pid=43315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148451.993:7149): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148481.947:7150): table=nat:358 family=10 entries=14 op=nft_register_rule pid=43377 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148481.947:7150): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff237fefd0 a2=0 a3=7fff237fefbc items=0 ppid=33621 pid=43377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148481.947:7150): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148481.948:7151): table=filter:359 family=10 entries=20 op=nft_register_rule pid=43377 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148481.948:7151): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff237fefd0 a2=0 a3=7fff237fefbc items=0 ppid=33621 pid=43377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148481.948:7151): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148482.066:7152): table=nat:360 family=2 entries=18 op=nft_register_rule pid=43430 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148482.066:7152): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffee1061f0 a2=0 a3=7fffee1061dc items=0 ppid=33621 pid=43430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148482.066:7152): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148482.066:7153): table=filter:361 family=2 entries=20 op=nft_register_rule pid=43430 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148482.066:7153): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffee1061f0 a2=0 a3=7fffee1061dc items=0 ppid=33621 pid=43430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148482.066:7153): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148512.020:7154): table=nat:362 family=10 entries=14 op=nft_register_rule pid=43490 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148512.020:7154): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe246861d0 a2=0 a3=7ffe246861bc items=0 ppid=33621 pid=43490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148512.020:7154): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148512.021:7155): table=filter:363 family=10 entries=20 op=nft_register_rule pid=43490 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148512.021:7155): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe246861d0 a2=0 a3=7ffe246861bc items=0 ppid=33621 pid=43490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148512.021:7155): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148512.137:7156): table=nat:364 family=2 entries=18 op=nft_register_rule pid=43543 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148512.137:7156): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd7f4edad0 a2=0 a3=7ffd7f4edabc items=0 ppid=33621 pid=43543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148512.137:7156): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148512.137:7157): table=filter:365 family=2 entries=20 op=nft_register_rule pid=43543 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148512.137:7157): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7f4edad0 a2=0 a3=7ffd7f4edabc items=0 ppid=33621 pid=43543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148512.137:7157): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148542.090:7158): table=nat:366 family=10 entries=14 op=nft_register_rule pid=43606 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148542.090:7158): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc94747080 a2=0 a3=7ffc9474706c items=0 ppid=33621 pid=43606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148542.090:7158): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148542.090:7159): table=filter:367 family=10 entries=20 op=nft_register_rule pid=43606 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148542.090:7159): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc94747080 a2=0 a3=7ffc9474706c items=0 ppid=33621 pid=43606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148542.090:7159): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148542.205:7160): table=nat:368 family=2 entries=18 op=nft_register_rule pid=43659 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148542.205:7160): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd749a1920 a2=0 a3=7ffd749a190c items=0 ppid=33621 pid=43659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148542.205:7160): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148542.206:7161): table=filter:369 family=2 entries=20 op=nft_register_rule pid=43659 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148542.206:7161): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd749a1920 a2=0 a3=7ffd749a190c items=0 ppid=33621 pid=43659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148542.206:7161): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148572.153:7162): table=nat:370 family=10 entries=14 op=nft_register_rule pid=43719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148572.153:7162): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe92b30f50 a2=0 a3=7ffe92b30f3c items=0 ppid=33621 pid=43719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148572.153:7162): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148572.154:7163): table=filter:371 family=10 entries=20 op=nft_register_rule pid=43719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148572.154:7163): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe92b30f50 a2=0 a3=7ffe92b30f3c items=0 ppid=33621 pid=43719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148572.154:7163): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148572.270:7164): table=nat:372 family=2 entries=18 op=nft_register_rule pid=43773 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148572.270:7164): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffdb34fa60 a2=0 a3=7fffdb34fa4c items=0 ppid=33621 pid=43773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148572.270:7164): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148572.271:7165): table=filter:373 family=2 entries=20 op=nft_register_rule pid=43773 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148572.271:7165): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffdb34fa60 a2=0 a3=7fffdb34fa4c items=0 ppid=33621 pid=43773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148572.271:7165): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148602.231:7166): table=nat:374 family=10 entries=14 op=nft_register_rule pid=43835 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148602.231:7166): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc18a77080 a2=0 a3=7ffc18a7706c items=0 ppid=33621 pid=43835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148602.231:7166): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148602.232:7167): table=filter:375 family=10 entries=20 op=nft_register_rule pid=43835 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148602.232:7167): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc18a77080 a2=0 a3=7ffc18a7706c items=0 ppid=33621 pid=43835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148602.232:7167): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148602.341:7168): table=nat:376 family=2 entries=18 op=nft_register_rule pid=43888 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148602.341:7168): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe8febc9a0 a2=0 a3=7ffe8febc98c items=0 ppid=33621 pid=43888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148602.341:7168): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148602.342:7169): table=filter:377 family=2 entries=20 op=nft_register_rule pid=43888 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148602.342:7169): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8febc9a0 a2=0 a3=7ffe8febc98c items=0 ppid=33621 pid=43888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148602.342:7169): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148632.294:7170): table=nat:378 family=10 entries=14 op=nft_register_rule pid=43948 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148632.294:7170): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffc5c5d840 a2=0 a3=7fffc5c5d82c items=0 ppid=33621 pid=43948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148632.294:7170): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148632.295:7171): table=filter:379 family=10 entries=20 op=nft_register_rule pid=43948 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148632.295:7171): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffc5c5d840 a2=0 a3=7fffc5c5d82c items=0 ppid=33621 pid=43948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148632.295:7171): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148632.407:7172): table=nat:380 family=2 entries=18 op=nft_register_rule pid=44001 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148632.407:7172): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe127f3920 a2=0 a3=7ffe127f390c items=0 ppid=33621 pid=44001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148632.407:7172): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148632.407:7173): table=filter:381 family=2 entries=20 op=nft_register_rule pid=44001 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148632.407:7173): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe127f3920 a2=0 a3=7ffe127f390c items=0 ppid=33621 pid=44001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148632.407:7173): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148662.364:7174): table=nat:382 family=10 entries=14 op=nft_register_rule pid=44070 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148662.364:7174): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdc1182c80 a2=0 a3=7ffdc1182c6c items=0 ppid=33621 pid=44070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148662.364:7174): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148662.364:7175): table=filter:383 family=10 entries=20 op=nft_register_rule pid=44070 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148662.364:7175): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc1182c80 a2=0 a3=7ffdc1182c6c items=0 ppid=33621 pid=44070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148662.364:7175): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148662.477:7176): table=nat:384 family=2 entries=18 op=nft_register_rule pid=44124 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148662.477:7176): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc054d64a0 a2=0 a3=7ffc054d648c items=0 ppid=33621 pid=44124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148662.477:7176): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148662.478:7177): table=filter:385 family=2 entries=20 op=nft_register_rule pid=44124 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148662.478:7177): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc054d64a0 a2=0 a3=7ffc054d648c items=0 ppid=33621 pid=44124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148662.478:7177): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148692.437:7178): table=nat:386 family=10 entries=14 op=nft_register_rule pid=44177 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148692.437:7178): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff7e805360 a2=0 a3=7fff7e80534c items=0 ppid=33621 pid=44177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148692.437:7178): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148692.437:7179): table=filter:387 family=10 entries=20 op=nft_register_rule pid=44177 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148692.437:7179): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff7e805360 a2=0 a3=7fff7e80534c items=0 ppid=33621 pid=44177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148692.437:7179): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148692.545:7180): table=nat:388 family=2 entries=18 op=nft_register_rule pid=44230 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148692.545:7180): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdca78a030 a2=0 a3=7ffdca78a01c items=0 ppid=33621 pid=44230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148692.545:7180): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148692.546:7181): table=filter:389 family=2 entries=20 op=nft_register_rule pid=44230 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148692.546:7181): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdca78a030 a2=0 a3=7ffdca78a01c items=0 ppid=33621 pid=44230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148692.546:7181): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148722.502:7182): table=nat:390 family=10 entries=14 op=nft_register_rule pid=44300 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148722.502:7182): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc1d226880 a2=0 a3=7ffc1d22686c items=0 ppid=33621 pid=44300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148722.502:7182): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148722.502:7183): table=filter:391 family=10 entries=20 op=nft_register_rule pid=44300 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148722.502:7183): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc1d226880 a2=0 a3=7ffc1d22686c items=0 ppid=33621 pid=44300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148722.502:7183): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148722.610:7184): table=nat:392 family=2 entries=18 op=nft_register_rule pid=44353 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148722.610:7184): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffef78b1ec0 a2=0 a3=7ffef78b1eac items=0 ppid=33621 pid=44353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148722.610:7184): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148722.611:7185): table=filter:393 family=2 entries=20 op=nft_register_rule pid=44353 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148722.611:7185): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef78b1ec0 a2=0 a3=7ffef78b1eac items=0 ppid=33621 pid=44353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148722.611:7185): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148752.573:7186): table=nat:394 family=10 entries=14 op=nft_register_rule pid=44406 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148752.573:7186): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffece5543c0 a2=0 a3=7ffece5543ac items=0 ppid=33621 pid=44406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148752.573:7186): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148752.573:7187): table=filter:395 family=10 entries=20 op=nft_register_rule pid=44406 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148752.573:7187): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffece5543c0 a2=0 a3=7ffece5543ac items=0 ppid=33621 pid=44406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148752.573:7187): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148752.679:7188): table=nat:396 family=2 entries=18 op=nft_register_rule pid=44459 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148752.679:7188): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcdddac880 a2=0 a3=7ffcdddac86c items=0 ppid=33621 pid=44459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148752.679:7188): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148752.679:7189): table=filter:397 family=2 entries=20 op=nft_register_rule pid=44459 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148752.679:7189): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcdddac880 a2=0 a3=7ffcdddac86c items=0 ppid=33621 pid=44459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148752.679:7189): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148782.635:7190): table=nat:398 family=10 entries=14 op=nft_register_rule pid=44529 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148782.635:7190): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffda0fc25c0 a2=0 a3=7ffda0fc25ac items=0 ppid=33621 pid=44529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148782.635:7190): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148782.635:7191): table=filter:399 family=10 entries=20 op=nft_register_rule pid=44529 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148782.635:7191): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffda0fc25c0 a2=0 a3=7ffda0fc25ac items=0 ppid=33621 pid=44529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148782.635:7191): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148782.748:7192): table=nat:400 family=2 entries=18 op=nft_register_rule pid=44582 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148782.748:7192): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd36e368a0 a2=0 a3=7ffd36e3688c items=0 ppid=33621 pid=44582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148782.748:7192): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148782.749:7193): table=filter:401 family=2 entries=20 op=nft_register_rule pid=44582 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148782.749:7193): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd36e368a0 a2=0 a3=7ffd36e3688c items=0 ppid=33621 pid=44582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148782.749:7193): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148812.705:7194): table=nat:402 family=10 entries=14 op=nft_register_rule pid=44635 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148812.705:7194): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff4ebe2fe0 a2=0 a3=7fff4ebe2fcc items=0 ppid=33621 pid=44635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148812.705:7194): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148812.706:7195): table=filter:403 family=10 entries=20 op=nft_register_rule pid=44635 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148812.706:7195): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4ebe2fe0 a2=0 a3=7fff4ebe2fcc items=0 ppid=33621 pid=44635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148812.706:7195): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148812.816:7196): table=nat:404 family=2 entries=18 op=nft_register_rule pid=44688 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148812.816:7196): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffea68c7ee0 a2=0 a3=7ffea68c7ecc items=0 ppid=33621 pid=44688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148812.816:7196): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148812.817:7197): table=filter:405 family=2 entries=20 op=nft_register_rule pid=44688 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148812.817:7197): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffea68c7ee0 a2=0 a3=7ffea68c7ecc items=0 ppid=33621 pid=44688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148812.817:7197): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148842.779:7198): table=nat:406 family=10 entries=14 op=nft_register_rule pid=44757 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148842.779:7198): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc588de4e0 a2=0 a3=7ffc588de4cc items=0 ppid=33621 pid=44757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148842.779:7198): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148842.779:7199): table=filter:407 family=10 entries=20 op=nft_register_rule pid=44757 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148842.779:7199): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc588de4e0 a2=0 a3=7ffc588de4cc items=0 ppid=33621 pid=44757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148842.779:7199): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148842.888:7200): table=nat:408 family=2 entries=18 op=nft_register_rule pid=44810 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148842.888:7200): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffce8d3daa0 a2=0 a3=7ffce8d3da8c items=0 ppid=33621 pid=44810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148842.888:7200): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148842.888:7201): table=filter:409 family=2 entries=20 op=nft_register_rule pid=44810 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148842.888:7201): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffce8d3daa0 a2=0 a3=7ffce8d3da8c items=0 ppid=33621 pid=44810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148842.888:7201): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148872.842:7202): table=nat:410 family=10 entries=14 op=nft_register_rule pid=44863 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148872.842:7202): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc93148670 a2=0 a3=7ffc9314865c items=0 ppid=33621 pid=44863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148872.842:7202): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148872.843:7203): table=filter:411 family=10 entries=20 op=nft_register_rule pid=44863 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148872.843:7203): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc93148670 a2=0 a3=7ffc9314865c items=0 ppid=33621 pid=44863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148872.843:7203): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148872.962:7204): table=nat:412 family=2 entries=18 op=nft_register_rule pid=44916 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148872.962:7204): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe48e7b240 a2=0 a3=7ffe48e7b22c items=0 ppid=33621 pid=44916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148872.962:7204): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148872.962:7205): table=filter:413 family=2 entries=20 op=nft_register_rule pid=44916 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148872.962:7205): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe48e7b240 a2=0 a3=7ffe48e7b22c items=0 ppid=33621 pid=44916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148872.962:7205): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148902.923:7206): table=nat:414 family=10 entries=14 op=nft_register_rule pid=44985 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148902.923:7206): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff694c20f0 a2=0 a3=7fff694c20dc items=0 ppid=33621 pid=44985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148902.923:7206): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148902.924:7207): table=filter:415 family=10 entries=20 op=nft_register_rule pid=44985 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148902.924:7207): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff694c20f0 a2=0 a3=7fff694c20dc items=0 ppid=33621 pid=44985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148902.924:7207): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148903.025:7208): table=nat:416 family=2 entries=18 op=nft_register_rule pid=45038 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148903.025:7208): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff8d0a9b30 a2=0 a3=7fff8d0a9b1c items=0 ppid=33621 pid=45038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148903.025:7208): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148903.025:7209): table=filter:417 family=2 entries=20 op=nft_register_rule pid=45038 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148903.025:7209): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff8d0a9b30 a2=0 a3=7fff8d0a9b1c items=0 ppid=33621 pid=45038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148903.025:7209): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148932.990:7210): table=nat:418 family=10 entries=14 op=nft_register_rule pid=45092 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148932.990:7210): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffe81629c0 a2=0 a3=7fffe81629ac items=0 ppid=33621 pid=45092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148932.990:7210): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148932.990:7211): table=filter:419 family=10 entries=20 op=nft_register_rule pid=45092 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148932.990:7211): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe81629c0 a2=0 a3=7fffe81629ac items=0 ppid=33621 pid=45092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148932.990:7211): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148933.094:7212): table=nat:420 family=2 entries=18 op=nft_register_rule pid=45146 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148933.094:7212): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc6611dbe0 a2=0 a3=7ffc6611dbcc items=0 ppid=33621 pid=45146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148933.094:7212): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148933.095:7213): table=filter:421 family=2 entries=20 op=nft_register_rule pid=45146 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148933.095:7213): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc6611dbe0 a2=0 a3=7ffc6611dbcc items=0 ppid=33621 pid=45146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148933.095:7213): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148963.055:7214): table=nat:422 family=10 entries=14 op=nft_register_rule pid=45222 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148963.055:7214): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc5b5a7460 a2=0 a3=7ffc5b5a744c items=0 ppid=33621 pid=45222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148963.055:7214): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148963.056:7215): table=filter:423 family=10 entries=20 op=nft_register_rule pid=45222 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148963.056:7215): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5b5a7460 a2=0 a3=7ffc5b5a744c items=0 ppid=33621 pid=45222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148963.056:7215): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148963.158:7216): table=nat:424 family=2 entries=18 op=nft_register_rule pid=45276 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148963.158:7216): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd1eba1690 a2=0 a3=7ffd1eba167c items=0 ppid=33621 pid=45276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148963.158:7216): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148963.158:7217): table=filter:425 family=2 entries=20 op=nft_register_rule pid=45276 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148963.158:7217): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd1eba1690 a2=0 a3=7ffd1eba167c items=0 ppid=33621 pid=45276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148963.158:7217): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148993.123:7218): table=nat:426 family=10 entries=14 op=nft_register_rule pid=45329 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148993.123:7218): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc8ac16f50 a2=0 a3=7ffc8ac16f3c items=0 ppid=33621 pid=45329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148993.123:7218): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148993.124:7219): table=filter:427 family=10 entries=20 op=nft_register_rule pid=45329 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739148993.124:7219): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc8ac16f50 a2=0 a3=7ffc8ac16f3c items=0 ppid=33621 pid=45329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148993.124:7219): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148993.229:7220): table=nat:428 family=2 entries=18 op=nft_register_rule pid=45382 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148993.229:7220): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffca0128560 a2=0 a3=7ffca012854c items=0 ppid=33621 pid=45382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148993.229:7220): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739148993.230:7221): table=filter:429 family=2 entries=20 op=nft_register_rule pid=45382 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739148993.230:7221): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca0128560 a2=0 a3=7ffca012854c items=0 ppid=33621 pid=45382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739148993.230:7221): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149023.189:7222): table=nat:430 family=10 entries=14 op=nft_register_rule pid=45445 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149023.189:7222): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd6f2dff60 a2=0 a3=7ffd6f2dff4c items=0 ppid=33621 pid=45445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149023.189:7222): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149023.190:7223): table=filter:431 family=10 entries=20 op=nft_register_rule pid=45445 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149023.190:7223): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd6f2dff60 a2=0 a3=7ffd6f2dff4c items=0 ppid=33621 pid=45445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149023.190:7223): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149023.296:7224): table=nat:432 family=2 entries=18 op=nft_register_rule pid=45498 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149023.296:7224): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc3d7297e0 a2=0 a3=7ffc3d7297cc items=0 ppid=33621 pid=45498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149023.296:7224): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149023.297:7225): table=filter:433 family=2 entries=20 op=nft_register_rule pid=45498 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149023.297:7225): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc3d7297e0 a2=0 a3=7ffc3d7297cc items=0 ppid=33621 pid=45498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149023.297:7225): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149053.252:7226): table=nat:434 family=10 entries=14 op=nft_register_rule pid=45558 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149053.252:7226): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd85528010 a2=0 a3=7ffd85527ffc items=0 ppid=33621 pid=45558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149053.252:7226): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149053.253:7227): table=filter:435 family=10 entries=20 op=nft_register_rule pid=45558 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149053.253:7227): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd85528010 a2=0 a3=7ffd85527ffc items=0 ppid=33621 pid=45558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149053.253:7227): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149053.364:7228): table=nat:436 family=2 entries=18 op=nft_register_rule pid=45611 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149053.364:7228): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc29ddaed0 a2=0 a3=7ffc29ddaebc items=0 ppid=33621 pid=45611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149053.364:7228): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149053.365:7229): table=filter:437 family=2 entries=20 op=nft_register_rule pid=45611 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149053.365:7229): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc29ddaed0 a2=0 a3=7ffc29ddaebc items=0 ppid=33621 pid=45611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149053.365:7229): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149083.321:7230): table=nat:438 family=10 entries=14 op=nft_register_rule pid=45673 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149083.321:7230): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe670c91a0 a2=0 a3=7ffe670c918c items=0 ppid=33621 pid=45673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149083.321:7230): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149083.322:7231): table=filter:439 family=10 entries=20 op=nft_register_rule pid=45673 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149083.322:7231): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe670c91a0 a2=0 a3=7ffe670c918c items=0 ppid=33621 pid=45673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149083.322:7231): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149083.428:7232): table=nat:440 family=2 entries=18 op=nft_register_rule pid=45726 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149083.428:7232): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc261afc50 a2=0 a3=7ffc261afc3c items=0 ppid=33621 pid=45726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149083.428:7232): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149083.428:7233): table=filter:441 family=2 entries=20 op=nft_register_rule pid=45726 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149083.428:7233): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc261afc50 a2=0 a3=7ffc261afc3c items=0 ppid=33621 pid=45726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149083.428:7233): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149113.397:7234): table=nat:442 family=10 entries=14 op=nft_register_rule pid=45786 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149113.397:7234): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff10d74900 a2=0 a3=7fff10d748ec items=0 ppid=33621 pid=45786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149113.397:7234): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149113.398:7235): table=filter:443 family=10 entries=20 op=nft_register_rule pid=45786 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149113.398:7235): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff10d74900 a2=0 a3=7fff10d748ec items=0 ppid=33621 pid=45786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149113.398:7235): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149113.505:7236): table=nat:444 family=2 entries=18 op=nft_register_rule pid=45839 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149113.505:7236): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff33a4e300 a2=0 a3=7fff33a4e2ec items=0 ppid=33621 pid=45839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149113.505:7236): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149113.506:7237): table=filter:445 family=2 entries=20 op=nft_register_rule pid=45839 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149113.506:7237): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff33a4e300 a2=0 a3=7fff33a4e2ec items=0 ppid=33621 pid=45839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149113.506:7237): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149143.460:7238): table=nat:446 family=10 entries=14 op=nft_register_rule pid=45901 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149143.460:7238): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc15408350 a2=0 a3=7ffc1540833c items=0 ppid=33621 pid=45901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149143.460:7238): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149143.461:7239): table=filter:447 family=10 entries=20 op=nft_register_rule pid=45901 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149143.461:7239): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc15408350 a2=0 a3=7ffc1540833c items=0 ppid=33621 pid=45901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149143.461:7239): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149143.568:7240): table=nat:448 family=2 entries=18 op=nft_register_rule pid=45955 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149143.568:7240): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc5ccad9e0 a2=0 a3=7ffc5ccad9cc items=0 ppid=33621 pid=45955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149143.568:7240): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149143.568:7241): table=filter:449 family=2 entries=20 op=nft_register_rule pid=45955 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149143.568:7241): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5ccad9e0 a2=0 a3=7ffc5ccad9cc items=0 ppid=33621 pid=45955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149143.568:7241): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149173.526:7242): table=nat:450 family=10 entries=14 op=nft_register_rule pid=46015 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149173.526:7242): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc32cefb30 a2=0 a3=7ffc32cefb1c items=0 ppid=33621 pid=46015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149173.526:7242): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149173.526:7243): table=filter:451 family=10 entries=20 op=nft_register_rule pid=46015 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149173.526:7243): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc32cefb30 a2=0 a3=7ffc32cefb1c items=0 ppid=33621 pid=46015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149173.526:7243): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149173.631:7244): table=nat:452 family=2 entries=18 op=nft_register_rule pid=46068 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149173.631:7244): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe66c0a620 a2=0 a3=7ffe66c0a60c items=0 ppid=33621 pid=46068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149173.631:7244): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149173.632:7245): table=filter:453 family=2 entries=20 op=nft_register_rule pid=46068 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149173.632:7245): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe66c0a620 a2=0 a3=7ffe66c0a60c items=0 ppid=33621 pid=46068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149173.632:7245): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149203.591:7246): table=nat:454 family=10 entries=14 op=nft_register_rule pid=46130 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149203.591:7246): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffecd077b80 a2=0 a3=7ffecd077b6c items=0 ppid=33621 pid=46130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149203.591:7246): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149203.592:7247): table=filter:455 family=10 entries=20 op=nft_register_rule pid=46130 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149203.592:7247): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffecd077b80 a2=0 a3=7ffecd077b6c items=0 ppid=33621 pid=46130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149203.592:7247): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149203.702:7248): table=nat:456 family=2 entries=18 op=nft_register_rule pid=46183 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149203.702:7248): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffde9a393d0 a2=0 a3=7ffde9a393bc items=0 ppid=33621 pid=46183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149203.702:7248): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149203.702:7249): table=filter:457 family=2 entries=20 op=nft_register_rule pid=46183 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149203.702:7249): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffde9a393d0 a2=0 a3=7ffde9a393bc items=0 ppid=33621 pid=46183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149203.702:7249): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149233.658:7250): table=nat:458 family=10 entries=14 op=nft_register_rule pid=46243 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149233.658:7250): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe9d3c72e0 a2=0 a3=7ffe9d3c72cc items=0 ppid=33621 pid=46243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149233.658:7250): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149233.658:7251): table=filter:459 family=10 entries=20 op=nft_register_rule pid=46243 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149233.658:7251): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9d3c72e0 a2=0 a3=7ffe9d3c72cc items=0 ppid=33621 pid=46243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149233.658:7251): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149233.774:7252): table=nat:460 family=2 entries=18 op=nft_register_rule pid=46297 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149233.774:7252): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe2bb7db20 a2=0 a3=7ffe2bb7db0c items=0 ppid=33621 pid=46297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149233.774:7252): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149233.775:7253): table=filter:461 family=2 entries=20 op=nft_register_rule pid=46297 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149233.775:7253): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe2bb7db20 a2=0 a3=7ffe2bb7db0c items=0 ppid=33621 pid=46297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149233.775:7253): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149263.723:7254): table=nat:462 family=10 entries=14 op=nft_register_rule pid=46382 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149263.723:7254): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff46320b80 a2=0 a3=7fff46320b6c items=0 ppid=33621 pid=46382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149263.723:7254): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149263.723:7255): table=filter:463 family=10 entries=20 op=nft_register_rule pid=46382 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149263.723:7255): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff46320b80 a2=0 a3=7fff46320b6c items=0 ppid=33621 pid=46382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149263.723:7255): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149263.841:7256): table=nat:464 family=2 entries=18 op=nft_register_rule pid=46435 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149263.841:7256): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff564f0610 a2=0 a3=7fff564f05fc items=0 ppid=33621 pid=46435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149263.841:7256): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149263.841:7257): table=filter:465 family=2 entries=20 op=nft_register_rule pid=46435 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149263.841:7257): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff564f0610 a2=0 a3=7fff564f05fc items=0 ppid=33621 pid=46435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149263.841:7257): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149293.788:7258): table=nat:466 family=10 entries=14 op=nft_register_rule pid=46496 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149293.788:7258): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe732775b0 a2=0 a3=7ffe7327759c items=0 ppid=33621 pid=46496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149293.788:7258): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149293.788:7259): table=filter:467 family=10 entries=20 op=nft_register_rule pid=46496 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149293.788:7259): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe732775b0 a2=0 a3=7ffe7327759c items=0 ppid=33621 pid=46496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149293.788:7259): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149293.904:7260): table=nat:468 family=2 entries=18 op=nft_register_rule pid=46550 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149293.904:7260): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffca2d9fb20 a2=0 a3=7ffca2d9fb0c items=0 ppid=33621 pid=46550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149293.904:7260): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149293.904:7261): table=filter:469 family=2 entries=20 op=nft_register_rule pid=46550 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149293.904:7261): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca2d9fb20 a2=0 a3=7ffca2d9fb0c items=0 ppid=33621 pid=46550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149293.904:7261): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149323.852:7262): table=nat:470 family=10 entries=14 op=nft_register_rule pid=46612 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149323.852:7262): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd71e303f0 a2=0 a3=7ffd71e303dc items=0 ppid=33621 pid=46612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149323.852:7262): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149323.853:7263): table=filter:471 family=10 entries=20 op=nft_register_rule pid=46612 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149323.853:7263): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd71e303f0 a2=0 a3=7ffd71e303dc items=0 ppid=33621 pid=46612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149323.853:7263): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149323.968:7264): table=nat:472 family=2 entries=18 op=nft_register_rule pid=46665 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149323.968:7264): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffdb101540 a2=0 a3=7fffdb10152c items=0 ppid=33621 pid=46665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149323.968:7264): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149323.968:7265): table=filter:473 family=2 entries=20 op=nft_register_rule pid=46665 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149323.968:7265): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffdb101540 a2=0 a3=7fffdb10152c items=0 ppid=33621 pid=46665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149323.968:7265): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149353.921:7266): table=nat:474 family=10 entries=14 op=nft_register_rule pid=46719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149353.921:7266): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffca5786fe0 a2=0 a3=7ffca5786fcc items=0 ppid=33621 pid=46719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149353.921:7266): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149353.922:7267): table=filter:475 family=10 entries=20 op=nft_register_rule pid=46719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149353.922:7267): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca5786fe0 a2=0 a3=7ffca5786fcc items=0 ppid=33621 pid=46719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149353.922:7267): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149354.038:7268): table=nat:476 family=2 entries=18 op=nft_register_rule pid=46772 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149354.038:7268): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd7d670600 a2=0 a3=7ffd7d6705ec items=0 ppid=33621 pid=46772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149354.038:7268): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149354.039:7269): table=filter:477 family=2 entries=20 op=nft_register_rule pid=46772 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149354.039:7269): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7d670600 a2=0 a3=7ffd7d6705ec items=0 ppid=33621 pid=46772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149354.039:7269): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149383.985:7270): table=nat:478 family=10 entries=14 op=nft_register_rule pid=46841 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149383.985:7270): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd018bfe50 a2=0 a3=7ffd018bfe3c items=0 ppid=33621 pid=46841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149383.985:7270): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149383.985:7271): table=filter:479 family=10 entries=20 op=nft_register_rule pid=46841 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149383.985:7271): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd018bfe50 a2=0 a3=7ffd018bfe3c items=0 ppid=33621 pid=46841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149383.985:7271): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149384.103:7272): table=nat:480 family=2 entries=18 op=nft_register_rule pid=46894 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149384.103:7272): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe48f99aa0 a2=0 a3=7ffe48f99a8c items=0 ppid=33621 pid=46894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149384.103:7272): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149384.103:7273): table=filter:481 family=2 entries=20 op=nft_register_rule pid=46894 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149384.103:7273): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe48f99aa0 a2=0 a3=7ffe48f99a8c items=0 ppid=33621 pid=46894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149384.103:7273): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149414.055:7274): table=nat:482 family=10 entries=14 op=nft_register_rule pid=46947 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149414.055:7274): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe93af0da0 a2=0 a3=7ffe93af0d8c items=0 ppid=33621 pid=46947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149414.055:7274): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149414.055:7275): table=filter:483 family=10 entries=20 op=nft_register_rule pid=46947 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149414.055:7275): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe93af0da0 a2=0 a3=7ffe93af0d8c items=0 ppid=33621 pid=46947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149414.055:7275): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149414.172:7276): table=nat:484 family=2 entries=18 op=nft_register_rule pid=47000 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149414.172:7276): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffef6ab99e0 a2=0 a3=7ffef6ab99cc items=0 ppid=33621 pid=47000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149414.172:7276): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149414.172:7277): table=filter:485 family=2 entries=20 op=nft_register_rule pid=47000 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149414.172:7277): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef6ab99e0 a2=0 a3=7ffef6ab99cc items=0 ppid=33621 pid=47000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149414.172:7277): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149444.117:7278): table=nat:486 family=10 entries=14 op=nft_register_rule pid=47069 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149444.117:7278): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffca1ff86d0 a2=0 a3=7ffca1ff86bc items=0 ppid=33621 pid=47069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149444.117:7278): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149444.117:7279): table=filter:487 family=10 entries=20 op=nft_register_rule pid=47069 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149444.117:7279): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca1ff86d0 a2=0 a3=7ffca1ff86bc items=0 ppid=33621 pid=47069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149444.117:7279): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149444.236:7280): table=nat:488 family=2 entries=18 op=nft_register_rule pid=47122 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149444.236:7280): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffef666c290 a2=0 a3=7ffef666c27c items=0 ppid=33621 pid=47122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149444.236:7280): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149444.236:7281): table=filter:489 family=2 entries=20 op=nft_register_rule pid=47122 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149444.236:7281): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef666c290 a2=0 a3=7ffef666c27c items=0 ppid=33621 pid=47122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149444.236:7281): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149474.179:7282): table=nat:490 family=10 entries=14 op=nft_register_rule pid=47175 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149474.179:7282): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcbe1a1420 a2=0 a3=7ffcbe1a140c items=0 ppid=33621 pid=47175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149474.179:7282): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149474.179:7283): table=filter:491 family=10 entries=20 op=nft_register_rule pid=47175 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149474.179:7283): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcbe1a1420 a2=0 a3=7ffcbe1a140c items=0 ppid=33621 pid=47175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149474.179:7283): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149474.303:7284): table=nat:492 family=2 entries=18 op=nft_register_rule pid=47228 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149474.303:7284): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd602edd00 a2=0 a3=7ffd602edcec items=0 ppid=33621 pid=47228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149474.303:7284): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149474.304:7285): table=filter:493 family=2 entries=20 op=nft_register_rule pid=47228 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149474.304:7285): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd602edd00 a2=0 a3=7ffd602edcec items=0 ppid=33621 pid=47228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149474.304:7285): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149504.246:7286): table=nat:494 family=10 entries=14 op=nft_register_rule pid=47298 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149504.246:7286): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc4ac00b00 a2=0 a3=7ffc4ac00aec items=0 ppid=33621 pid=47298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149504.246:7286): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149504.247:7287): table=filter:495 family=10 entries=20 op=nft_register_rule pid=47298 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149504.247:7287): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc4ac00b00 a2=0 a3=7ffc4ac00aec items=0 ppid=33621 pid=47298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149504.247:7287): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149504.372:7288): table=nat:496 family=2 entries=18 op=nft_register_rule pid=47351 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149504.372:7288): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdeffce2c0 a2=0 a3=7ffdeffce2ac items=0 ppid=33621 pid=47351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149504.372:7288): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149504.372:7289): table=filter:497 family=2 entries=20 op=nft_register_rule pid=47351 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149504.372:7289): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdeffce2c0 a2=0 a3=7ffdeffce2ac items=0 ppid=33621 pid=47351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149504.372:7289): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149534.314:7290): table=nat:498 family=10 entries=14 op=nft_register_rule pid=47405 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149534.314:7290): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff03311860 a2=0 a3=7fff0331184c items=0 ppid=33621 pid=47405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149534.314:7290): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149534.314:7291): table=filter:499 family=10 entries=20 op=nft_register_rule pid=47405 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149534.314:7291): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff03311860 a2=0 a3=7fff0331184c items=0 ppid=33621 pid=47405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149534.314:7291): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149534.439:7292): table=nat:500 family=2 entries=18 op=nft_register_rule pid=47458 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149534.439:7292): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff43743920 a2=0 a3=7fff4374390c items=0 ppid=33621 pid=47458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149534.439:7292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149534.439:7293): table=filter:501 family=2 entries=20 op=nft_register_rule pid=47458 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149534.439:7293): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff43743920 a2=0 a3=7fff4374390c items=0 ppid=33621 pid=47458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149534.439:7293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149564.379:7294): table=nat:502 family=10 entries=14 op=nft_register_rule pid=47535 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149564.379:7294): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff0a6c97a0 a2=0 a3=7fff0a6c978c items=0 ppid=33621 pid=47535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149564.379:7294): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149564.380:7295): table=filter:503 family=10 entries=20 op=nft_register_rule pid=47535 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149564.380:7295): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff0a6c97a0 a2=0 a3=7fff0a6c978c items=0 ppid=33621 pid=47535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149564.380:7295): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149564.502:7296): table=nat:504 family=2 entries=18 op=nft_register_rule pid=47588 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149564.502:7296): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffe10c75f0 a2=0 a3=7fffe10c75dc items=0 ppid=33621 pid=47588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149564.502:7296): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149564.502:7297): table=filter:505 family=2 entries=20 op=nft_register_rule pid=47588 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149564.502:7297): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe10c75f0 a2=0 a3=7fffe10c75dc items=0 ppid=33621 pid=47588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149564.502:7297): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149594.444:7298): table=nat:506 family=10 entries=14 op=nft_register_rule pid=47642 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149594.444:7298): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff79450c90 a2=0 a3=7fff79450c7c items=0 ppid=33621 pid=47642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149594.444:7298): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149594.444:7299): table=filter:507 family=10 entries=20 op=nft_register_rule pid=47642 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149594.444:7299): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff79450c90 a2=0 a3=7fff79450c7c items=0 ppid=33621 pid=47642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149594.444:7299): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149594.571:7300): table=nat:508 family=2 entries=18 op=nft_register_rule pid=47695 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149594.571:7300): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdcfd52730 a2=0 a3=7ffdcfd5271c items=0 ppid=33621 pid=47695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149594.571:7300): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149594.572:7301): table=filter:509 family=2 entries=20 op=nft_register_rule pid=47695 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149594.572:7301): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcfd52730 a2=0 a3=7ffdcfd5271c items=0 ppid=33621 pid=47695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149594.572:7301): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149624.511:7302): table=nat:510 family=10 entries=14 op=nft_register_rule pid=47766 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149624.511:7302): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc10ffba20 a2=0 a3=7ffc10ffba0c items=0 ppid=33621 pid=47766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149624.511:7302): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149624.511:7303): table=filter:511 family=10 entries=20 op=nft_register_rule pid=47766 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149624.511:7303): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc10ffba20 a2=0 a3=7ffc10ffba0c items=0 ppid=33621 pid=47766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149624.511:7303): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149624.638:7304): table=nat:512 family=2 entries=18 op=nft_register_rule pid=47819 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149624.638:7304): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff02bd5fd0 a2=0 a3=7fff02bd5fbc items=0 ppid=33621 pid=47819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149624.638:7304): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149624.638:7305): table=filter:513 family=2 entries=20 op=nft_register_rule pid=47819 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149624.638:7305): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff02bd5fd0 a2=0 a3=7fff02bd5fbc items=0 ppid=33621 pid=47819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149624.638:7305): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149654.577:7306): table=nat:514 family=10 entries=14 op=nft_register_rule pid=47872 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149654.577:7306): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff157160c0 a2=0 a3=7fff157160ac items=0 ppid=33621 pid=47872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149654.577:7306): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149654.578:7307): table=filter:515 family=10 entries=20 op=nft_register_rule pid=47872 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149654.578:7307): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff157160c0 a2=0 a3=7fff157160ac items=0 ppid=33621 pid=47872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149654.578:7307): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149654.713:7308): table=nat:516 family=2 entries=18 op=nft_register_rule pid=47926 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149654.713:7308): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc512d8700 a2=0 a3=7ffc512d86ec items=0 ppid=33621 pid=47926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149654.713:7308): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149654.713:7309): table=filter:517 family=2 entries=20 op=nft_register_rule pid=47926 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149654.713:7309): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc512d8700 a2=0 a3=7ffc512d86ec items=0 ppid=33621 pid=47926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149654.713:7309): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149684.645:7310): table=nat:518 family=10 entries=14 op=nft_register_rule pid=47988 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149684.645:7310): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd47df0160 a2=0 a3=7ffd47df014c items=0 ppid=33621 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149684.645:7310): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149684.645:7311): table=filter:519 family=10 entries=20 op=nft_register_rule pid=47988 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149684.645:7311): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd47df0160 a2=0 a3=7ffd47df014c items=0 ppid=33621 pid=47988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149684.645:7311): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149684.784:7312): table=nat:520 family=2 entries=18 op=nft_register_rule pid=48041 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149684.784:7312): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc97481c10 a2=0 a3=7ffc97481bfc items=0 ppid=33621 pid=48041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149684.784:7312): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149684.785:7313): table=filter:521 family=2 entries=20 op=nft_register_rule pid=48041 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149684.785:7313): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc97481c10 a2=0 a3=7ffc97481bfc items=0 ppid=33621 pid=48041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149684.785:7313): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149714.709:7314): table=nat:522 family=10 entries=14 op=nft_register_rule pid=48101 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149714.709:7314): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdbab4f6a0 a2=0 a3=7ffdbab4f68c items=0 ppid=33621 pid=48101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149714.709:7314): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149714.709:7315): table=filter:523 family=10 entries=20 op=nft_register_rule pid=48101 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149714.709:7315): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdbab4f6a0 a2=0 a3=7ffdbab4f68c items=0 ppid=33621 pid=48101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149714.709:7315): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149714.850:7316): table=nat:524 family=2 entries=18 op=nft_register_rule pid=48154 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149714.850:7316): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffff9089e0 a2=0 a3=7fffff9089cc items=0 ppid=33621 pid=48154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149714.850:7316): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149714.850:7317): table=filter:525 family=2 entries=20 op=nft_register_rule pid=48154 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149714.850:7317): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffff9089e0 a2=0 a3=7fffff9089cc items=0 ppid=33621 pid=48154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149714.850:7317): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149744.778:7318): table=nat:526 family=10 entries=14 op=nft_register_rule pid=48216 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149744.778:7318): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe906519d0 a2=0 a3=7ffe906519bc items=0 ppid=33621 pid=48216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149744.778:7318): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149744.779:7319): table=filter:527 family=10 entries=20 op=nft_register_rule pid=48216 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149744.779:7319): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe906519d0 a2=0 a3=7ffe906519bc items=0 ppid=33621 pid=48216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149744.779:7319): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149744.921:7320): table=nat:528 family=2 entries=18 op=nft_register_rule pid=48269 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149744.921:7320): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff3aa680f0 a2=0 a3=7fff3aa680dc items=0 ppid=33621 pid=48269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149744.921:7320): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149744.922:7321): table=filter:529 family=2 entries=20 op=nft_register_rule pid=48269 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149744.922:7321): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3aa680f0 a2=0 a3=7fff3aa680dc items=0 ppid=33621 pid=48269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149744.922:7321): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149774.848:7322): table=nat:530 family=10 entries=14 op=nft_register_rule pid=48329 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149774.848:7322): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc53aea120 a2=0 a3=7ffc53aea10c items=0 ppid=33621 pid=48329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149774.848:7322): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149774.848:7323): table=filter:531 family=10 entries=20 op=nft_register_rule pid=48329 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149774.848:7323): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc53aea120 a2=0 a3=7ffc53aea10c items=0 ppid=33621 pid=48329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149774.848:7323): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149774.991:7324): table=nat:532 family=2 entries=18 op=nft_register_rule pid=48382 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149774.991:7324): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff8dd57960 a2=0 a3=7fff8dd5794c items=0 ppid=33621 pid=48382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149774.991:7324): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149774.991:7325): table=filter:533 family=2 entries=20 op=nft_register_rule pid=48382 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149774.991:7325): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff8dd57960 a2=0 a3=7fff8dd5794c items=0 ppid=33621 pid=48382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149774.991:7325): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149804.918:7326): table=nat:534 family=10 entries=14 op=nft_register_rule pid=48445 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149804.918:7326): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc119eda60 a2=0 a3=7ffc119eda4c items=0 ppid=33621 pid=48445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149804.918:7326): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149804.919:7327): table=filter:535 family=10 entries=20 op=nft_register_rule pid=48445 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149804.919:7327): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc119eda60 a2=0 a3=7ffc119eda4c items=0 ppid=33621 pid=48445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149804.919:7327): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149805.062:7328): table=nat:536 family=2 entries=18 op=nft_register_rule pid=48498 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149805.062:7328): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe08c9ca70 a2=0 a3=7ffe08c9ca5c items=0 ppid=33621 pid=48498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149805.062:7328): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149805.062:7329): table=filter:537 family=2 entries=20 op=nft_register_rule pid=48498 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149805.062:7329): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe08c9ca70 a2=0 a3=7ffe08c9ca5c items=0 ppid=33621 pid=48498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149805.062:7329): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149834.982:7330): table=nat:538 family=10 entries=14 op=nft_register_rule pid=48558 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149834.982:7330): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe7a3be290 a2=0 a3=7ffe7a3be27c items=0 ppid=33621 pid=48558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149834.982:7330): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149834.982:7331): table=filter:539 family=10 entries=20 op=nft_register_rule pid=48558 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149834.982:7331): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7a3be290 a2=0 a3=7ffe7a3be27c items=0 ppid=33621 pid=48558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149834.982:7331): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149835.136:7332): table=nat:540 family=2 entries=18 op=nft_register_rule pid=48611 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149835.136:7332): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffee9026fa0 a2=0 a3=7ffee9026f8c items=0 ppid=33621 pid=48611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149835.136:7332): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149835.137:7333): table=filter:541 family=2 entries=20 op=nft_register_rule pid=48611 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149835.137:7333): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee9026fa0 a2=0 a3=7ffee9026f8c items=0 ppid=33621 pid=48611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149835.137:7333): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149865.045:7334): table=nat:542 family=10 entries=14 op=nft_register_rule pid=48680 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149865.045:7334): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe457c8380 a2=0 a3=7ffe457c836c items=0 ppid=33621 pid=48680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149865.045:7334): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149865.046:7335): table=filter:543 family=10 entries=20 op=nft_register_rule pid=48680 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149865.046:7335): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe457c8380 a2=0 a3=7ffe457c836c items=0 ppid=33621 pid=48680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149865.046:7335): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149865.205:7336): table=nat:544 family=2 entries=18 op=nft_register_rule pid=48734 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149865.205:7336): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe6703e850 a2=0 a3=7ffe6703e83c items=0 ppid=33621 pid=48734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149865.205:7336): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149865.205:7337): table=filter:545 family=2 entries=20 op=nft_register_rule pid=48734 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149865.205:7337): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe6703e850 a2=0 a3=7ffe6703e83c items=0 ppid=33621 pid=48734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149865.205:7337): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149895.109:7338): table=nat:546 family=10 entries=14 op=nft_register_rule pid=48795 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149895.109:7338): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffeadb28940 a2=0 a3=7ffeadb2892c items=0 ppid=33621 pid=48795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149895.109:7338): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149895.110:7339): table=filter:547 family=10 entries=20 op=nft_register_rule pid=48795 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149895.110:7339): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeadb28940 a2=0 a3=7ffeadb2892c items=0 ppid=33621 pid=48795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149895.110:7339): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149895.272:7340): table=nat:548 family=2 entries=18 op=nft_register_rule pid=48848 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149895.272:7340): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff5bf1f4d0 a2=0 a3=7fff5bf1f4bc items=0 ppid=33621 pid=48848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149895.272:7340): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149895.272:7341): table=filter:549 family=2 entries=20 op=nft_register_rule pid=48848 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149895.272:7341): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff5bf1f4d0 a2=0 a3=7fff5bf1f4bc items=0 ppid=33621 pid=48848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149895.272:7341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149925.176:7342): table=nat:550 family=10 entries=14 op=nft_register_rule pid=48911 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149925.176:7342): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe84b91ee0 a2=0 a3=7ffe84b91ecc items=0 ppid=33621 pid=48911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149925.176:7342): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149925.177:7343): table=filter:551 family=10 entries=20 op=nft_register_rule pid=48911 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149925.177:7343): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe84b91ee0 a2=0 a3=7ffe84b91ecc items=0 ppid=33621 pid=48911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149925.177:7343): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149925.345:7344): table=nat:552 family=2 entries=18 op=nft_register_rule pid=48964 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149925.345:7344): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe39f1da10 a2=0 a3=7ffe39f1d9fc items=0 ppid=33621 pid=48964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149925.345:7344): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149925.346:7345): table=filter:553 family=2 entries=20 op=nft_register_rule pid=48964 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149925.346:7345): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe39f1da10 a2=0 a3=7ffe39f1d9fc items=0 ppid=33621 pid=48964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149925.346:7345): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149955.240:7346): table=nat:554 family=10 entries=14 op=nft_register_rule pid=49024 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149955.240:7346): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd48bb1620 a2=0 a3=7ffd48bb160c items=0 ppid=33621 pid=49024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149955.240:7346): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149955.241:7347): table=filter:555 family=10 entries=20 op=nft_register_rule pid=49024 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149955.241:7347): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd48bb1620 a2=0 a3=7ffd48bb160c items=0 ppid=33621 pid=49024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149955.241:7347): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149955.411:7348): table=nat:556 family=2 entries=18 op=nft_register_rule pid=49077 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149955.411:7348): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdb68c54f0 a2=0 a3=7ffdb68c54dc items=0 ppid=33621 pid=49077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149955.411:7348): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149955.411:7349): table=filter:557 family=2 entries=20 op=nft_register_rule pid=49077 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149955.411:7349): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb68c54f0 a2=0 a3=7ffdb68c54dc items=0 ppid=33621 pid=49077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149955.411:7349): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149985.311:7350): table=nat:558 family=10 entries=14 op=nft_register_rule pid=49139 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149985.311:7350): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdb5204430 a2=0 a3=7ffdb520441c items=0 ppid=33621 pid=49139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149985.311:7350): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149985.312:7351): table=filter:559 family=10 entries=20 op=nft_register_rule pid=49139 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739149985.312:7351): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb5204430 a2=0 a3=7ffdb520441c items=0 ppid=33621 pid=49139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149985.312:7351): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149985.478:7352): table=nat:560 family=2 entries=18 op=nft_register_rule pid=49193 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149985.478:7352): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd7b8352f0 a2=0 a3=7ffd7b8352dc items=0 ppid=33621 pid=49193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149985.478:7352): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739149985.478:7353): table=filter:561 family=2 entries=20 op=nft_register_rule pid=49193 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739149985.478:7353): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7b8352f0 a2=0 a3=7ffd7b8352dc items=0 ppid=33621 pid=49193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739149985.478:7353): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150015.378:7354): table=nat:562 family=10 entries=14 op=nft_register_rule pid=49247 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150015.378:7354): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdf3c28370 a2=0 a3=7ffdf3c2835c items=0 ppid=33621 pid=49247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150015.378:7354): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150015.378:7355): table=filter:563 family=10 entries=20 op=nft_register_rule pid=49247 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150015.378:7355): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf3c28370 a2=0 a3=7ffdf3c2835c items=0 ppid=33621 pid=49247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150015.378:7355): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150015.541:7356): table=nat:564 family=2 entries=18 op=nft_register_rule pid=49300 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150015.541:7356): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd3eb171a0 a2=0 a3=7ffd3eb1718c items=0 ppid=33621 pid=49300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150015.541:7356): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150015.542:7357): table=filter:565 family=2 entries=20 op=nft_register_rule pid=49300 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150015.542:7357): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd3eb171a0 a2=0 a3=7ffd3eb1718c items=0 ppid=33621 pid=49300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150015.542:7357): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150045.447:7358): table=nat:566 family=10 entries=14 op=nft_register_rule pid=49369 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150045.447:7358): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffb8a1f850 a2=0 a3=7fffb8a1f83c items=0 ppid=33621 pid=49369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150045.447:7358): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150045.447:7359): table=filter:567 family=10 entries=20 op=nft_register_rule pid=49369 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150045.447:7359): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffb8a1f850 a2=0 a3=7fffb8a1f83c items=0 ppid=33621 pid=49369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150045.447:7359): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150045.605:7360): table=nat:568 family=2 entries=18 op=nft_register_rule pid=49422 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150045.605:7360): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff4181e7a0 a2=0 a3=7fff4181e78c items=0 ppid=33621 pid=49422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150045.605:7360): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150045.606:7361): table=filter:569 family=2 entries=20 op=nft_register_rule pid=49422 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150045.606:7361): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4181e7a0 a2=0 a3=7fff4181e78c items=0 ppid=33621 pid=49422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150045.606:7361): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150075.512:7362): table=nat:570 family=10 entries=14 op=nft_register_rule pid=49475 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150075.512:7362): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff9fa74980 a2=0 a3=7fff9fa7496c items=0 ppid=33621 pid=49475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150075.512:7362): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150075.513:7363): table=filter:571 family=10 entries=20 op=nft_register_rule pid=49475 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150075.513:7363): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9fa74980 a2=0 a3=7fff9fa7496c items=0 ppid=33621 pid=49475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150075.513:7363): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150075.671:7364): table=nat:572 family=2 entries=18 op=nft_register_rule pid=49528 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150075.671:7364): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcbcef0e20 a2=0 a3=7ffcbcef0e0c items=0 ppid=33621 pid=49528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150075.671:7364): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150075.671:7365): table=filter:573 family=2 entries=20 op=nft_register_rule pid=49528 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150075.671:7365): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcbcef0e20 a2=0 a3=7ffcbcef0e0c items=0 ppid=33621 pid=49528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150075.671:7365): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150105.578:7366): table=nat:574 family=10 entries=14 op=nft_register_rule pid=49597 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150105.578:7366): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffa68198a0 a2=0 a3=7fffa681988c items=0 ppid=33621 pid=49597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150105.578:7366): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150105.578:7367): table=filter:575 family=10 entries=20 op=nft_register_rule pid=49597 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150105.578:7367): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa68198a0 a2=0 a3=7fffa681988c items=0 ppid=33621 pid=49597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150105.578:7367): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150105.735:7368): table=nat:576 family=2 entries=18 op=nft_register_rule pid=49650 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150105.735:7368): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffb49178b0 a2=0 a3=7fffb491789c items=0 ppid=33621 pid=49650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150105.735:7368): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150105.735:7369): table=filter:577 family=2 entries=20 op=nft_register_rule pid=49650 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150105.735:7369): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffb49178b0 a2=0 a3=7fffb491789c items=0 ppid=33621 pid=49650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150105.735:7369): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150135.651:7370): table=nat:578 family=10 entries=14 op=nft_register_rule pid=49703 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150135.651:7370): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffed6159f70 a2=0 a3=7ffed6159f5c items=0 ppid=33621 pid=49703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150135.651:7370): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150135.652:7371): table=filter:579 family=10 entries=20 op=nft_register_rule pid=49703 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150135.652:7371): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed6159f70 a2=0 a3=7ffed6159f5c items=0 ppid=33621 pid=49703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150135.652:7371): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150135.800:7372): table=nat:580 family=2 entries=18 op=nft_register_rule pid=49756 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150135.800:7372): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd38045590 a2=0 a3=7ffd3804557c items=0 ppid=33621 pid=49756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150135.800:7372): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150135.800:7373): table=filter:581 family=2 entries=20 op=nft_register_rule pid=49756 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150135.800:7373): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd38045590 a2=0 a3=7ffd3804557c items=0 ppid=33621 pid=49756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150135.800:7373): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150165.723:7374): table=nat:582 family=10 entries=14 op=nft_register_rule pid=49832 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150165.723:7374): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc966fc6e0 a2=0 a3=7ffc966fc6cc items=0 ppid=33621 pid=49832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150165.723:7374): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150165.724:7375): table=filter:583 family=10 entries=20 op=nft_register_rule pid=49832 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150165.724:7375): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc966fc6e0 a2=0 a3=7ffc966fc6cc items=0 ppid=33621 pid=49832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150165.724:7375): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150165.873:7376): table=nat:584 family=2 entries=18 op=nft_register_rule pid=49885 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150165.873:7376): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc7d578fc0 a2=0 a3=7ffc7d578fac items=0 ppid=33621 pid=49885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150165.873:7376): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150165.874:7377): table=filter:585 family=2 entries=20 op=nft_register_rule pid=49885 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150165.874:7377): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc7d578fc0 a2=0 a3=7ffc7d578fac items=0 ppid=33621 pid=49885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150165.874:7377): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150195.789:7378): table=nat:586 family=10 entries=14 op=nft_register_rule pid=49938 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150195.789:7378): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd0b02bbd0 a2=0 a3=7ffd0b02bbbc items=0 ppid=33621 pid=49938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150195.789:7378): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150195.790:7379): table=filter:587 family=10 entries=20 op=nft_register_rule pid=49938 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150195.790:7379): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0b02bbd0 a2=0 a3=7ffd0b02bbbc items=0 ppid=33621 pid=49938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150195.790:7379): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150195.942:7380): table=nat:588 family=2 entries=18 op=nft_register_rule pid=49991 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150195.942:7380): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdc8133a40 a2=0 a3=7ffdc8133a2c items=0 ppid=33621 pid=49991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150195.942:7380): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150195.942:7381): table=filter:589 family=2 entries=20 op=nft_register_rule pid=49991 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150195.942:7381): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc8133a40 a2=0 a3=7ffdc8133a2c items=0 ppid=33621 pid=49991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150195.942:7381): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150225.869:7382): table=nat:590 family=10 entries=14 op=nft_register_rule pid=50061 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150225.869:7382): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe9d912140 a2=0 a3=7ffe9d91212c items=0 ppid=33621 pid=50061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150225.869:7382): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150225.869:7383): table=filter:591 family=10 entries=20 op=nft_register_rule pid=50061 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150225.869:7383): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9d912140 a2=0 a3=7ffe9d91212c items=0 ppid=33621 pid=50061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150225.869:7383): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150226.014:7384): table=nat:592 family=2 entries=18 op=nft_register_rule pid=50115 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150226.014:7384): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe4b6fd080 a2=0 a3=7ffe4b6fd06c items=0 ppid=33621 pid=50115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150226.014:7384): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150226.015:7385): table=filter:593 family=2 entries=20 op=nft_register_rule pid=50115 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150226.015:7385): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe4b6fd080 a2=0 a3=7ffe4b6fd06c items=0 ppid=33621 pid=50115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150226.015:7385): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150255.938:7386): table=nat:594 family=10 entries=14 op=nft_register_rule pid=50168 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150255.938:7386): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd8c1ed1f0 a2=0 a3=7ffd8c1ed1dc items=0 ppid=33621 pid=50168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150255.938:7386): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150255.939:7387): table=filter:595 family=10 entries=20 op=nft_register_rule pid=50168 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150255.939:7387): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd8c1ed1f0 a2=0 a3=7ffd8c1ed1dc items=0 ppid=33621 pid=50168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150255.939:7387): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150256.084:7388): table=nat:596 family=2 entries=18 op=nft_register_rule pid=50221 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150256.084:7388): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcfb786780 a2=0 a3=7ffcfb78676c items=0 ppid=33621 pid=50221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150256.084:7388): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150256.085:7389): table=filter:597 family=2 entries=20 op=nft_register_rule pid=50221 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150256.085:7389): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcfb786780 a2=0 a3=7ffcfb78676c items=0 ppid=33621 pid=50221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150256.085:7389): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150286.010:7390): table=nat:598 family=10 entries=14 op=nft_register_rule pid=50291 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150286.010:7390): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffef0203930 a2=0 a3=7ffef020391c items=0 ppid=33621 pid=50291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150286.010:7390): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150286.011:7391): table=filter:599 family=10 entries=20 op=nft_register_rule pid=50291 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150286.011:7391): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef0203930 a2=0 a3=7ffef020391c items=0 ppid=33621 pid=50291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150286.011:7391): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150286.152:7392): table=nat:600 family=2 entries=18 op=nft_register_rule pid=50344 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150286.152:7392): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffbdef8660 a2=0 a3=7fffbdef864c items=0 ppid=33621 pid=50344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150286.152:7392): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150286.153:7393): table=filter:601 family=2 entries=20 op=nft_register_rule pid=50344 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150286.153:7393): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffbdef8660 a2=0 a3=7fffbdef864c items=0 ppid=33621 pid=50344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150286.153:7393): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150316.076:7394): table=nat:602 family=10 entries=14 op=nft_register_rule pid=50397 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150316.076:7394): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe980d3ad0 a2=0 a3=7ffe980d3abc items=0 ppid=33621 pid=50397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150316.076:7394): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150316.077:7395): table=filter:603 family=10 entries=20 op=nft_register_rule pid=50397 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150316.077:7395): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe980d3ad0 a2=0 a3=7ffe980d3abc items=0 ppid=33621 pid=50397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150316.077:7395): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150316.226:7396): table=nat:604 family=2 entries=18 op=nft_register_rule pid=50451 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150316.226:7396): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffffc97aea0 a2=0 a3=7ffffc97ae8c items=0 ppid=33621 pid=50451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150316.226:7396): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150316.227:7397): table=filter:605 family=2 entries=20 op=nft_register_rule pid=50451 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150316.227:7397): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffffc97aea0 a2=0 a3=7ffffc97ae8c items=0 ppid=33621 pid=50451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150316.227:7397): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150346.149:7398): table=nat:606 family=10 entries=14 op=nft_register_rule pid=50514 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150346.149:7398): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd0c5b8010 a2=0 a3=7ffd0c5b7ffc items=0 ppid=33621 pid=50514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150346.149:7398): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150346.150:7399): table=filter:607 family=10 entries=20 op=nft_register_rule pid=50514 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150346.150:7399): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0c5b8010 a2=0 a3=7ffd0c5b7ffc items=0 ppid=33621 pid=50514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150346.150:7399): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150346.306:7400): table=nat:608 family=2 entries=18 op=nft_register_rule pid=50567 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150346.306:7400): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc53056760 a2=0 a3=7ffc5305674c items=0 ppid=33621 pid=50567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150346.306:7400): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150346.306:7401): table=filter:609 family=2 entries=20 op=nft_register_rule pid=50567 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150346.306:7401): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc53056760 a2=0 a3=7ffc5305674c items=0 ppid=33621 pid=50567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150346.306:7401): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150376.213:7402): table=nat:610 family=10 entries=14 op=nft_register_rule pid=50627 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150376.213:7402): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd4ef2da90 a2=0 a3=7ffd4ef2da7c items=0 ppid=33621 pid=50627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150376.213:7402): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150376.214:7403): table=filter:611 family=10 entries=20 op=nft_register_rule pid=50627 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150376.214:7403): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd4ef2da90 a2=0 a3=7ffd4ef2da7c items=0 ppid=33621 pid=50627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150376.214:7403): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150376.373:7404): table=nat:612 family=2 entries=18 op=nft_register_rule pid=50680 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150376.373:7404): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc5b925710 a2=0 a3=7ffc5b9256fc items=0 ppid=33621 pid=50680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150376.373:7404): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150376.374:7405): table=filter:613 family=2 entries=20 op=nft_register_rule pid=50680 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150376.374:7405): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5b925710 a2=0 a3=7ffc5b9256fc items=0 ppid=33621 pid=50680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150376.374:7405): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150406.278:7406): table=nat:614 family=10 entries=14 op=nft_register_rule pid=50742 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150406.278:7406): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffde97ad610 a2=0 a3=7ffde97ad5fc items=0 ppid=33621 pid=50742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150406.278:7406): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150406.279:7407): table=filter:615 family=10 entries=20 op=nft_register_rule pid=50742 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150406.279:7407): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffde97ad610 a2=0 a3=7ffde97ad5fc items=0 ppid=33621 pid=50742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150406.279:7407): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150406.440:7408): table=nat:616 family=2 entries=18 op=nft_register_rule pid=50795 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150406.440:7408): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff9d88d200 a2=0 a3=7fff9d88d1ec items=0 ppid=33621 pid=50795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150406.440:7408): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150406.440:7409): table=filter:617 family=2 entries=20 op=nft_register_rule pid=50795 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150406.440:7409): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9d88d200 a2=0 a3=7fff9d88d1ec items=0 ppid=33621 pid=50795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150406.440:7409): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150436.343:7410): table=nat:618 family=10 entries=14 op=nft_register_rule pid=50855 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150436.343:7410): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd4ad677c0 a2=0 a3=7ffd4ad677ac items=0 ppid=33621 pid=50855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150436.343:7410): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150436.343:7411): table=filter:619 family=10 entries=20 op=nft_register_rule pid=50855 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150436.343:7411): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd4ad677c0 a2=0 a3=7ffd4ad677ac items=0 ppid=33621 pid=50855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150436.343:7411): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150436.507:7412): table=nat:620 family=2 entries=18 op=nft_register_rule pid=50908 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150436.507:7412): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff8908d3a0 a2=0 a3=7fff8908d38c items=0 ppid=33621 pid=50908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150436.507:7412): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150436.508:7413): table=filter:621 family=2 entries=20 op=nft_register_rule pid=50908 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150436.508:7413): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff8908d3a0 a2=0 a3=7fff8908d38c items=0 ppid=33621 pid=50908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150436.508:7413): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150466.406:7414): table=nat:622 family=10 entries=14 op=nft_register_rule pid=50977 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150466.406:7414): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd146c0cb0 a2=0 a3=7ffd146c0c9c items=0 ppid=33621 pid=50977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150466.406:7414): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150466.406:7415): table=filter:623 family=10 entries=20 op=nft_register_rule pid=50977 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150466.406:7415): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd146c0cb0 a2=0 a3=7ffd146c0c9c items=0 ppid=33621 pid=50977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150466.406:7415): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150466.571:7416): table=nat:624 family=2 entries=18 op=nft_register_rule pid=51030 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150466.571:7416): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd366c0e00 a2=0 a3=7ffd366c0dec items=0 ppid=33621 pid=51030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150466.571:7416): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150466.572:7417): table=filter:625 family=2 entries=20 op=nft_register_rule pid=51030 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150466.572:7417): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd366c0e00 a2=0 a3=7ffd366c0dec items=0 ppid=33621 pid=51030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150466.572:7417): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150496.478:7418): table=nat:626 family=10 entries=14 op=nft_register_rule pid=51090 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150496.478:7418): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe9a71b200 a2=0 a3=7ffe9a71b1ec items=0 ppid=33621 pid=51090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150496.478:7418): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150496.479:7419): table=filter:627 family=10 entries=20 op=nft_register_rule pid=51090 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150496.479:7419): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe9a71b200 a2=0 a3=7ffe9a71b1ec items=0 ppid=33621 pid=51090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150496.479:7419): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150496.642:7420): table=nat:628 family=2 entries=18 op=nft_register_rule pid=51143 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150496.642:7420): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffffefa2f70 a2=0 a3=7ffffefa2f5c items=0 ppid=33621 pid=51143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150496.642:7420): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150496.642:7421): table=filter:629 family=2 entries=20 op=nft_register_rule pid=51143 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150496.642:7421): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffffefa2f70 a2=0 a3=7ffffefa2f5c items=0 ppid=33621 pid=51143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150496.642:7421): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150526.543:7422): table=nat:630 family=10 entries=14 op=nft_register_rule pid=51205 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150526.543:7422): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc0bca25b0 a2=0 a3=7ffc0bca259c items=0 ppid=33621 pid=51205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150526.543:7422): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150526.544:7423): table=filter:631 family=10 entries=20 op=nft_register_rule pid=51205 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150526.544:7423): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc0bca25b0 a2=0 a3=7ffc0bca259c items=0 ppid=33621 pid=51205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150526.544:7423): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150526.716:7424): table=nat:632 family=2 entries=18 op=nft_register_rule pid=51259 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150526.716:7424): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffde2758fd0 a2=0 a3=7ffde2758fbc items=0 ppid=33621 pid=51259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150526.716:7424): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150526.716:7425): table=filter:633 family=2 entries=20 op=nft_register_rule pid=51259 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150526.716:7425): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffde2758fd0 a2=0 a3=7ffde2758fbc items=0 ppid=33621 pid=51259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150526.716:7425): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150556.616:7426): table=nat:634 family=10 entries=14 op=nft_register_rule pid=51319 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150556.616:7426): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc5e4efc00 a2=0 a3=7ffc5e4efbec items=0 ppid=33621 pid=51319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150556.616:7426): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150556.616:7427): table=filter:635 family=10 entries=20 op=nft_register_rule pid=51319 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150556.616:7427): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5e4efc00 a2=0 a3=7ffc5e4efbec items=0 ppid=33621 pid=51319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150556.616:7427): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150556.783:7428): table=nat:636 family=2 entries=18 op=nft_register_rule pid=51372 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150556.783:7428): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1bd5b1c0 a2=0 a3=7ffe1bd5b1ac items=0 ppid=33621 pid=51372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150556.783:7428): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150556.784:7429): table=filter:637 family=2 entries=20 op=nft_register_rule pid=51372 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150556.784:7429): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1bd5b1c0 a2=0 a3=7ffe1bd5b1ac items=0 ppid=33621 pid=51372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150556.784:7429): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150586.685:7430): table=nat:638 family=10 entries=14 op=nft_register_rule pid=51434 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150586.685:7430): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd15ba92d0 a2=0 a3=7ffd15ba92bc items=0 ppid=33621 pid=51434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150586.685:7430): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150586.686:7431): table=filter:639 family=10 entries=20 op=nft_register_rule pid=51434 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150586.686:7431): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd15ba92d0 a2=0 a3=7ffd15ba92bc items=0 ppid=33621 pid=51434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150586.686:7431): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150586.850:7432): table=nat:640 family=2 entries=18 op=nft_register_rule pid=51487 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150586.850:7432): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe91869990 a2=0 a3=7ffe9186997c items=0 ppid=33621 pid=51487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150586.850:7432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150586.850:7433): table=filter:641 family=2 entries=20 op=nft_register_rule pid=51487 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150586.850:7433): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe91869990 a2=0 a3=7ffe9186997c items=0 ppid=33621 pid=51487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150586.850:7433): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150616.753:7434): table=nat:642 family=10 entries=14 op=nft_register_rule pid=51548 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150616.753:7434): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdd8f0d350 a2=0 a3=7ffdd8f0d33c items=0 ppid=33621 pid=51548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150616.753:7434): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150616.754:7435): table=filter:643 family=10 entries=20 op=nft_register_rule pid=51548 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150616.754:7435): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdd8f0d350 a2=0 a3=7ffdd8f0d33c items=0 ppid=33621 pid=51548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150616.754:7435): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150616.918:7436): table=nat:644 family=2 entries=18 op=nft_register_rule pid=51601 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150616.918:7436): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd0cc3b060 a2=0 a3=7ffd0cc3b04c items=0 ppid=33621 pid=51601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150616.918:7436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150616.919:7437): table=filter:645 family=2 entries=20 op=nft_register_rule pid=51601 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150616.919:7437): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0cc3b060 a2=0 a3=7ffd0cc3b04c items=0 ppid=33621 pid=51601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150616.919:7437): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150646.817:7438): table=nat:646 family=10 entries=14 op=nft_register_rule pid=51664 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150646.817:7438): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffea57d0c40 a2=0 a3=7ffea57d0c2c items=0 ppid=33621 pid=51664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150646.817:7438): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150646.818:7439): table=filter:647 family=10 entries=20 op=nft_register_rule pid=51664 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150646.818:7439): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffea57d0c40 a2=0 a3=7ffea57d0c2c items=0 ppid=33621 pid=51664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150646.818:7439): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150646.990:7440): table=nat:648 family=2 entries=18 op=nft_register_rule pid=51717 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150646.990:7440): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdc14e3bd0 a2=0 a3=7ffdc14e3bbc items=0 ppid=33621 pid=51717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150646.990:7440): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150646.991:7441): table=filter:649 family=2 entries=20 op=nft_register_rule pid=51717 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150646.991:7441): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc14e3bd0 a2=0 a3=7ffdc14e3bbc items=0 ppid=33621 pid=51717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150646.991:7441): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150676.882:7442): table=nat:650 family=10 entries=14 op=nft_register_rule pid=51771 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150676.882:7442): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe4314b800 a2=0 a3=7ffe4314b7ec items=0 ppid=33621 pid=51771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150676.882:7442): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150676.883:7443): table=filter:651 family=10 entries=20 op=nft_register_rule pid=51771 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150676.883:7443): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe4314b800 a2=0 a3=7ffe4314b7ec items=0 ppid=33621 pid=51771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150676.883:7443): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150677.057:7444): table=nat:652 family=2 entries=18 op=nft_register_rule pid=51824 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150677.057:7444): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff31398040 a2=0 a3=7fff3139802c items=0 ppid=33621 pid=51824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150677.057:7444): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150677.057:7445): table=filter:653 family=2 entries=20 op=nft_register_rule pid=51824 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150677.057:7445): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff31398040 a2=0 a3=7fff3139802c items=0 ppid=33621 pid=51824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150677.057:7445): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150706.946:7446): table=nat:654 family=10 entries=14 op=nft_register_rule pid=51895 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150706.946:7446): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd26f41150 a2=0 a3=7ffd26f4113c items=0 ppid=33621 pid=51895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150706.946:7446): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150706.946:7447): table=filter:655 family=10 entries=20 op=nft_register_rule pid=51895 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150706.946:7447): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd26f41150 a2=0 a3=7ffd26f4113c items=0 ppid=33621 pid=51895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150706.946:7447): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150707.124:7448): table=nat:656 family=2 entries=18 op=nft_register_rule pid=51948 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150707.124:7448): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff9820ade0 a2=0 a3=7fff9820adcc items=0 ppid=33621 pid=51948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150707.124:7448): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150707.125:7449): table=filter:657 family=2 entries=20 op=nft_register_rule pid=51948 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150707.125:7449): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9820ade0 a2=0 a3=7fff9820adcc items=0 ppid=33621 pid=51948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150707.125:7449): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150737.016:7450): table=nat:658 family=10 entries=14 op=nft_register_rule pid=52001 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150737.016:7450): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff6ce57c30 a2=0 a3=7fff6ce57c1c items=0 ppid=33621 pid=52001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150737.016:7450): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150737.017:7451): table=filter:659 family=10 entries=20 op=nft_register_rule pid=52001 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150737.017:7451): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff6ce57c30 a2=0 a3=7fff6ce57c1c items=0 ppid=33621 pid=52001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150737.017:7451): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150737.191:7452): table=nat:660 family=2 entries=18 op=nft_register_rule pid=52054 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150737.191:7452): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffaf01b420 a2=0 a3=7fffaf01b40c items=0 ppid=33621 pid=52054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150737.191:7452): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150737.192:7453): table=filter:661 family=2 entries=20 op=nft_register_rule pid=52054 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150737.192:7453): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffaf01b420 a2=0 a3=7fffaf01b40c items=0 ppid=33621 pid=52054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150737.192:7453): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150767.082:7454): table=nat:662 family=10 entries=14 op=nft_register_rule pid=52130 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150767.082:7454): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffd15e72f0 a2=0 a3=7fffd15e72dc items=0 ppid=33621 pid=52130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150767.082:7454): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150767.082:7455): table=filter:663 family=10 entries=20 op=nft_register_rule pid=52130 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150767.082:7455): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffd15e72f0 a2=0 a3=7fffd15e72dc items=0 ppid=33621 pid=52130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150767.082:7455): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150767.254:7456): table=nat:664 family=2 entries=18 op=nft_register_rule pid=52183 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150767.254:7456): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdaf352230 a2=0 a3=7ffdaf35221c items=0 ppid=33621 pid=52183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150767.254:7456): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150767.255:7457): table=filter:665 family=2 entries=20 op=nft_register_rule pid=52183 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150767.255:7457): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdaf352230 a2=0 a3=7ffdaf35221c items=0 ppid=33621 pid=52183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150767.255:7457): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150797.147:7458): table=nat:666 family=10 entries=14 op=nft_register_rule pid=52236 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150797.147:7458): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffbe461ef0 a2=0 a3=7fffbe461edc items=0 ppid=33621 pid=52236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150797.147:7458): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150797.147:7459): table=filter:667 family=10 entries=20 op=nft_register_rule pid=52236 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150797.147:7459): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffbe461ef0 a2=0 a3=7fffbe461edc items=0 ppid=33621 pid=52236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150797.147:7459): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150797.321:7460): table=nat:668 family=2 entries=18 op=nft_register_rule pid=52289 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150797.321:7460): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff4eb401d0 a2=0 a3=7fff4eb401bc items=0 ppid=33621 pid=52289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150797.321:7460): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150797.322:7461): table=filter:669 family=2 entries=20 op=nft_register_rule pid=52289 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150797.322:7461): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4eb401d0 a2=0 a3=7fff4eb401bc items=0 ppid=33621 pid=52289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150797.322:7461): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150827.209:7462): table=nat:670 family=10 entries=14 op=nft_register_rule pid=52358 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150827.209:7462): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc83142670 a2=0 a3=7ffc8314265c items=0 ppid=33621 pid=52358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150827.209:7462): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150827.210:7463): table=filter:671 family=10 entries=20 op=nft_register_rule pid=52358 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150827.210:7463): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc83142670 a2=0 a3=7ffc8314265c items=0 ppid=33621 pid=52358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150827.210:7463): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150827.386:7464): table=nat:672 family=2 entries=18 op=nft_register_rule pid=52411 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150827.386:7464): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffecbed0c70 a2=0 a3=7ffecbed0c5c items=0 ppid=33621 pid=52411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150827.386:7464): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150827.387:7465): table=filter:673 family=2 entries=20 op=nft_register_rule pid=52411 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150827.387:7465): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffecbed0c70 a2=0 a3=7ffecbed0c5c items=0 ppid=33621 pid=52411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150827.387:7465): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150857.273:7466): table=nat:674 family=10 entries=14 op=nft_register_rule pid=52464 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150857.273:7466): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffda5163ad0 a2=0 a3=7ffda5163abc items=0 ppid=33621 pid=52464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150857.273:7466): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150857.274:7467): table=filter:675 family=10 entries=20 op=nft_register_rule pid=52464 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150857.274:7467): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffda5163ad0 a2=0 a3=7ffda5163abc items=0 ppid=33621 pid=52464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150857.274:7467): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150857.460:7468): table=nat:676 family=2 entries=18 op=nft_register_rule pid=52517 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150857.460:7468): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc88b9f500 a2=0 a3=7ffc88b9f4ec items=0 ppid=33621 pid=52517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150857.460:7468): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150857.460:7469): table=filter:677 family=2 entries=20 op=nft_register_rule pid=52517 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150857.460:7469): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc88b9f500 a2=0 a3=7ffc88b9f4ec items=0 ppid=33621 pid=52517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150857.460:7469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150887.339:7470): table=nat:678 family=10 entries=14 op=nft_register_rule pid=52586 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150887.339:7470): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffee72480d0 a2=0 a3=7ffee72480bc items=0 ppid=33621 pid=52586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150887.339:7470): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150887.340:7471): table=filter:679 family=10 entries=20 op=nft_register_rule pid=52586 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150887.340:7471): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee72480d0 a2=0 a3=7ffee72480bc items=0 ppid=33621 pid=52586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150887.340:7471): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150887.531:7472): table=nat:680 family=2 entries=18 op=nft_register_rule pid=52639 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150887.531:7472): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd3ecab980 a2=0 a3=7ffd3ecab96c items=0 ppid=33621 pid=52639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150887.531:7472): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150887.532:7473): table=filter:681 family=2 entries=20 op=nft_register_rule pid=52639 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150887.532:7473): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd3ecab980 a2=0 a3=7ffd3ecab96c items=0 ppid=33621 pid=52639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150887.532:7473): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150917.406:7474): table=nat:682 family=10 entries=14 op=nft_register_rule pid=52692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150917.406:7474): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd609c8d50 a2=0 a3=7ffd609c8d3c items=0 ppid=33621 pid=52692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150917.406:7474): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150917.406:7475): table=filter:683 family=10 entries=20 op=nft_register_rule pid=52692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150917.406:7475): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd609c8d50 a2=0 a3=7ffd609c8d3c items=0 ppid=33621 pid=52692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150917.406:7475): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150917.598:7476): table=nat:684 family=2 entries=18 op=nft_register_rule pid=52746 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150917.598:7476): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1bdfaa70 a2=0 a3=7ffe1bdfaa5c items=0 ppid=33621 pid=52746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150917.598:7476): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150917.598:7477): table=filter:685 family=2 entries=20 op=nft_register_rule pid=52746 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150917.598:7477): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1bdfaa70 a2=0 a3=7ffe1bdfaa5c items=0 ppid=33621 pid=52746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150917.598:7477): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150947.474:7478): table=nat:686 family=10 entries=14 op=nft_register_rule pid=52822 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150947.474:7478): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcfbfedee0 a2=0 a3=7ffcfbfedecc items=0 ppid=33621 pid=52822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150947.474:7478): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150947.474:7479): table=filter:687 family=10 entries=20 op=nft_register_rule pid=52822 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150947.474:7479): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcfbfedee0 a2=0 a3=7ffcfbfedecc items=0 ppid=33621 pid=52822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150947.474:7479): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150947.670:7480): table=nat:688 family=2 entries=18 op=nft_register_rule pid=52875 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150947.670:7480): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe13ed90e0 a2=0 a3=7ffe13ed90cc items=0 ppid=33621 pid=52875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150947.670:7480): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150947.671:7481): table=filter:689 family=2 entries=20 op=nft_register_rule pid=52875 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150947.671:7481): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe13ed90e0 a2=0 a3=7ffe13ed90cc items=0 ppid=33621 pid=52875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150947.671:7481): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150977.544:7482): table=nat:690 family=10 entries=14 op=nft_register_rule pid=52928 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150977.544:7482): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd3e2b3420 a2=0 a3=7ffd3e2b340c items=0 ppid=33621 pid=52928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150977.544:7482): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150977.545:7483): table=filter:691 family=10 entries=20 op=nft_register_rule pid=52928 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739150977.545:7483): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd3e2b3420 a2=0 a3=7ffd3e2b340c items=0 ppid=33621 pid=52928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150977.545:7483): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150977.739:7484): table=nat:692 family=2 entries=18 op=nft_register_rule pid=52981 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150977.739:7484): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe844e31a0 a2=0 a3=7ffe844e318c items=0 ppid=33621 pid=52981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150977.739:7484): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739150977.739:7485): table=filter:693 family=2 entries=20 op=nft_register_rule pid=52981 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739150977.739:7485): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe844e31a0 a2=0 a3=7ffe844e318c items=0 ppid=33621 pid=52981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739150977.739:7485): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151007.619:7486): table=nat:694 family=10 entries=14 op=nft_register_rule pid=53050 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151007.619:7486): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc879a7fb0 a2=0 a3=7ffc879a7f9c items=0 ppid=33621 pid=53050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151007.619:7486): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151007.619:7487): table=filter:695 family=10 entries=20 op=nft_register_rule pid=53050 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151007.619:7487): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc879a7fb0 a2=0 a3=7ffc879a7f9c items=0 ppid=33621 pid=53050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151007.619:7487): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151007.819:7488): table=nat:696 family=2 entries=18 op=nft_register_rule pid=53104 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151007.819:7488): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffefc2009a0 a2=0 a3=7ffefc20098c items=0 ppid=33621 pid=53104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151007.819:7488): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151007.820:7489): table=filter:697 family=2 entries=20 op=nft_register_rule pid=53104 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151007.820:7489): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffefc2009a0 a2=0 a3=7ffefc20098c items=0 ppid=33621 pid=53104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151007.820:7489): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151037.681:7490): table=nat:698 family=10 entries=14 op=nft_register_rule pid=53158 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151037.681:7490): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdcc712180 a2=0 a3=7ffdcc71216c items=0 ppid=33621 pid=53158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151037.681:7490): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151037.681:7491): table=filter:699 family=10 entries=20 op=nft_register_rule pid=53158 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151037.681:7491): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcc712180 a2=0 a3=7ffdcc71216c items=0 ppid=33621 pid=53158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151037.681:7491): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151037.882:7492): table=nat:700 family=2 entries=18 op=nft_register_rule pid=53211 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151037.882:7492): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffe20d2960 a2=0 a3=7fffe20d294c items=0 ppid=33621 pid=53211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151037.882:7492): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151037.883:7493): table=filter:701 family=2 entries=20 op=nft_register_rule pid=53211 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151037.883:7493): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe20d2960 a2=0 a3=7fffe20d294c items=0 ppid=33621 pid=53211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151037.883:7493): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151067.746:7494): table=nat:702 family=10 entries=14 op=nft_register_rule pid=53288 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151067.746:7494): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff4f30b990 a2=0 a3=7fff4f30b97c items=0 ppid=33621 pid=53288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151067.746:7494): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151067.747:7495): table=filter:703 family=10 entries=20 op=nft_register_rule pid=53288 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151067.747:7495): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4f30b990 a2=0 a3=7fff4f30b97c items=0 ppid=33621 pid=53288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151067.747:7495): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151067.956:7496): table=nat:704 family=2 entries=18 op=nft_register_rule pid=53341 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151067.956:7496): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe54e3a8e0 a2=0 a3=7ffe54e3a8cc items=0 ppid=33621 pid=53341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151067.956:7496): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151067.956:7497): table=filter:705 family=2 entries=20 op=nft_register_rule pid=53341 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151067.956:7497): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe54e3a8e0 a2=0 a3=7ffe54e3a8cc items=0 ppid=33621 pid=53341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151067.956:7497): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151097.817:7498): table=nat:706 family=10 entries=14 op=nft_register_rule pid=53394 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151097.817:7498): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd41cfcef0 a2=0 a3=7ffd41cfcedc items=0 ppid=33621 pid=53394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151097.817:7498): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151097.817:7499): table=filter:707 family=10 entries=20 op=nft_register_rule pid=53394 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151097.817:7499): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd41cfcef0 a2=0 a3=7ffd41cfcedc items=0 ppid=33621 pid=53394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151097.817:7499): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151098.019:7500): table=nat:708 family=2 entries=18 op=nft_register_rule pid=53447 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151098.019:7500): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc9dabcf30 a2=0 a3=7ffc9dabcf1c items=0 ppid=33621 pid=53447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151098.019:7500): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151098.019:7501): table=filter:709 family=2 entries=20 op=nft_register_rule pid=53447 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151098.019:7501): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc9dabcf30 a2=0 a3=7ffc9dabcf1c items=0 ppid=33621 pid=53447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151098.019:7501): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151127.882:7502): table=nat:710 family=10 entries=14 op=nft_register_rule pid=53509 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151127.882:7502): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd52d1c200 a2=0 a3=7ffd52d1c1ec items=0 ppid=33621 pid=53509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151127.882:7502): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151127.883:7503): table=filter:711 family=10 entries=20 op=nft_register_rule pid=53509 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151127.883:7503): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd52d1c200 a2=0 a3=7ffd52d1c1ec items=0 ppid=33621 pid=53509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151127.883:7503): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151128.095:7504): table=nat:712 family=2 entries=18 op=nft_register_rule pid=53562 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151128.095:7504): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffec6923e20 a2=0 a3=7ffec6923e0c items=0 ppid=33621 pid=53562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151128.095:7504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151128.095:7505): table=filter:713 family=2 entries=20 op=nft_register_rule pid=53562 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151128.095:7505): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffec6923e20 a2=0 a3=7ffec6923e0c items=0 ppid=33621 pid=53562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151128.095:7505): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151157.953:7506): table=nat:714 family=10 entries=14 op=nft_register_rule pid=53622 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151157.953:7506): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff8fc90120 a2=0 a3=7fff8fc9010c items=0 ppid=33621 pid=53622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151157.953:7506): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151157.954:7507): table=filter:715 family=10 entries=20 op=nft_register_rule pid=53622 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151157.954:7507): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff8fc90120 a2=0 a3=7fff8fc9010c items=0 ppid=33621 pid=53622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151157.954:7507): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151158.160:7508): table=nat:716 family=2 entries=18 op=nft_register_rule pid=53675 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151158.160:7508): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffeaa49d320 a2=0 a3=7ffeaa49d30c items=0 ppid=33621 pid=53675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151158.160:7508): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151158.161:7509): table=filter:717 family=2 entries=20 op=nft_register_rule pid=53675 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151158.161:7509): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeaa49d320 a2=0 a3=7ffeaa49d30c items=0 ppid=33621 pid=53675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151158.161:7509): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151188.018:7510): table=nat:718 family=10 entries=14 op=nft_register_rule pid=53737 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151188.018:7510): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd4aff1720 a2=0 a3=7ffd4aff170c items=0 ppid=33621 pid=53737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151188.018:7510): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151188.018:7511): table=filter:719 family=10 entries=20 op=nft_register_rule pid=53737 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151188.018:7511): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd4aff1720 a2=0 a3=7ffd4aff170c items=0 ppid=33621 pid=53737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151188.018:7511): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151188.223:7512): table=nat:720 family=2 entries=18 op=nft_register_rule pid=53790 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151188.223:7512): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd34dd5830 a2=0 a3=7ffd34dd581c items=0 ppid=33621 pid=53790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151188.223:7512): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151188.224:7513): table=filter:721 family=2 entries=20 op=nft_register_rule pid=53790 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151188.224:7513): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd34dd5830 a2=0 a3=7ffd34dd581c items=0 ppid=33621 pid=53790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151188.224:7513): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151218.087:7514): table=nat:722 family=10 entries=14 op=nft_register_rule pid=53851 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151218.087:7514): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffff0705790 a2=0 a3=7ffff070577c items=0 ppid=33621 pid=53851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151218.087:7514): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151218.087:7515): table=filter:723 family=10 entries=20 op=nft_register_rule pid=53851 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151218.087:7515): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffff0705790 a2=0 a3=7ffff070577c items=0 ppid=33621 pid=53851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151218.087:7515): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151218.287:7516): table=nat:724 family=2 entries=18 op=nft_register_rule pid=53904 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151218.287:7516): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffcbf131d0 a2=0 a3=7fffcbf131bc items=0 ppid=33621 pid=53904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151218.287:7516): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151218.288:7517): table=filter:725 family=2 entries=20 op=nft_register_rule pid=53904 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151218.288:7517): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffcbf131d0 a2=0 a3=7fffcbf131bc items=0 ppid=33621 pid=53904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151218.288:7517): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151248.149:7518): table=nat:726 family=10 entries=14 op=nft_register_rule pid=53966 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151248.149:7518): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcf4281670 a2=0 a3=7ffcf428165c items=0 ppid=33621 pid=53966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151248.149:7518): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151248.149:7519): table=filter:727 family=10 entries=20 op=nft_register_rule pid=53966 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151248.149:7519): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcf4281670 a2=0 a3=7ffcf428165c items=0 ppid=33621 pid=53966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151248.149:7519): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151248.354:7520): table=nat:728 family=2 entries=18 op=nft_register_rule pid=54019 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151248.354:7520): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc66c2ea10 a2=0 a3=7ffc66c2e9fc items=0 ppid=33621 pid=54019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151248.354:7520): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151248.354:7521): table=filter:729 family=2 entries=20 op=nft_register_rule pid=54019 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151248.354:7521): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc66c2ea10 a2=0 a3=7ffc66c2e9fc items=0 ppid=33621 pid=54019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151248.354:7521): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151278.220:7522): table=nat:730 family=10 entries=14 op=nft_register_rule pid=54079 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151278.220:7522): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffedccdccf0 a2=0 a3=7ffedccdccdc items=0 ppid=33621 pid=54079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151278.220:7522): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151278.220:7523): table=filter:731 family=10 entries=20 op=nft_register_rule pid=54079 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151278.220:7523): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffedccdccf0 a2=0 a3=7ffedccdccdc items=0 ppid=33621 pid=54079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151278.220:7523): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151278.422:7524): table=nat:732 family=2 entries=18 op=nft_register_rule pid=54132 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151278.422:7524): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe0f52bfa0 a2=0 a3=7ffe0f52bf8c items=0 ppid=33621 pid=54132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151278.422:7524): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151278.422:7525): table=filter:733 family=2 entries=20 op=nft_register_rule pid=54132 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151278.422:7525): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe0f52bfa0 a2=0 a3=7ffe0f52bf8c items=0 ppid=33621 pid=54132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151278.422:7525): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151308.282:7526): table=nat:734 family=10 entries=14 op=nft_register_rule pid=54194 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151308.282:7526): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff007a6230 a2=0 a3=7fff007a621c items=0 ppid=33621 pid=54194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151308.282:7526): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151308.282:7527): table=filter:735 family=10 entries=20 op=nft_register_rule pid=54194 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151308.282:7527): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff007a6230 a2=0 a3=7fff007a621c items=0 ppid=33621 pid=54194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151308.282:7527): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151308.488:7528): table=nat:736 family=2 entries=18 op=nft_register_rule pid=54247 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151308.488:7528): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe3257ef40 a2=0 a3=7ffe3257ef2c items=0 ppid=33621 pid=54247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151308.488:7528): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151308.488:7529): table=filter:737 family=2 entries=20 op=nft_register_rule pid=54247 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151308.488:7529): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe3257ef40 a2=0 a3=7ffe3257ef2c items=0 ppid=33621 pid=54247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151308.488:7529): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151338.347:7530): table=nat:738 family=10 entries=14 op=nft_register_rule pid=54308 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151338.347:7530): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff9d178c90 a2=0 a3=7fff9d178c7c items=0 ppid=33621 pid=54308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151338.347:7530): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151338.347:7531): table=filter:739 family=10 entries=20 op=nft_register_rule pid=54308 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151338.347:7531): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9d178c90 a2=0 a3=7fff9d178c7c items=0 ppid=33621 pid=54308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151338.347:7531): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151338.553:7532): table=nat:740 family=2 entries=18 op=nft_register_rule pid=54361 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151338.553:7532): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffee4914b60 a2=0 a3=7ffee4914b4c items=0 ppid=33621 pid=54361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151338.553:7532): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151338.553:7533): table=filter:741 family=2 entries=20 op=nft_register_rule pid=54361 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151338.553:7533): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee4914b60 a2=0 a3=7ffee4914b4c items=0 ppid=33621 pid=54361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151338.553:7533): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151368.412:7534): table=nat:742 family=10 entries=14 op=nft_register_rule pid=54431 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151368.412:7534): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd58766ed0 a2=0 a3=7ffd58766ebc items=0 ppid=33621 pid=54431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151368.412:7534): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151368.413:7535): table=filter:743 family=10 entries=20 op=nft_register_rule pid=54431 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151368.413:7535): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd58766ed0 a2=0 a3=7ffd58766ebc items=0 ppid=33621 pid=54431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151368.413:7535): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151368.619:7536): table=nat:744 family=2 entries=18 op=nft_register_rule pid=54484 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151368.619:7536): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1240e150 a2=0 a3=7ffe1240e13c items=0 ppid=33621 pid=54484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151368.619:7536): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151368.620:7537): table=filter:745 family=2 entries=20 op=nft_register_rule pid=54484 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151368.620:7537): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1240e150 a2=0 a3=7ffe1240e13c items=0 ppid=33621 pid=54484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151368.620:7537): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151398.477:7538): table=nat:746 family=10 entries=14 op=nft_register_rule pid=54544 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151398.477:7538): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd0a2d0220 a2=0 a3=7ffd0a2d020c items=0 ppid=33621 pid=54544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151398.477:7538): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151398.478:7539): table=filter:747 family=10 entries=20 op=nft_register_rule pid=54544 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151398.478:7539): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0a2d0220 a2=0 a3=7ffd0a2d020c items=0 ppid=33621 pid=54544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151398.478:7539): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151398.687:7540): table=nat:748 family=2 entries=18 op=nft_register_rule pid=54598 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151398.687:7540): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd64f92f80 a2=0 a3=7ffd64f92f6c items=0 ppid=33621 pid=54598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151398.687:7540): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151398.688:7541): table=filter:749 family=2 entries=20 op=nft_register_rule pid=54598 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151398.688:7541): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd64f92f80 a2=0 a3=7ffd64f92f6c items=0 ppid=33621 pid=54598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151398.688:7541): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151428.543:7542): table=nat:750 family=10 entries=14 op=nft_register_rule pid=54660 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151428.543:7542): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffec9b7fb70 a2=0 a3=7ffec9b7fb5c items=0 ppid=33621 pid=54660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151428.543:7542): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151428.544:7543): table=filter:751 family=10 entries=20 op=nft_register_rule pid=54660 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151428.544:7543): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffec9b7fb70 a2=0 a3=7ffec9b7fb5c items=0 ppid=33621 pid=54660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151428.544:7543): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151428.755:7544): table=nat:752 family=2 entries=18 op=nft_register_rule pid=54714 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151428.755:7544): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc7a1c9520 a2=0 a3=7ffc7a1c950c items=0 ppid=33621 pid=54714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151428.755:7544): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151428.755:7545): table=filter:753 family=2 entries=20 op=nft_register_rule pid=54714 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151428.755:7545): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc7a1c9520 a2=0 a3=7ffc7a1c950c items=0 ppid=33621 pid=54714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151428.755:7545): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151458.608:7546): table=nat:754 family=10 entries=14 op=nft_register_rule pid=54767 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151458.608:7546): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffefc91ccd0 a2=0 a3=7ffefc91ccbc items=0 ppid=33621 pid=54767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151458.608:7546): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151458.608:7547): table=filter:755 family=10 entries=20 op=nft_register_rule pid=54767 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151458.608:7547): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffefc91ccd0 a2=0 a3=7ffefc91ccbc items=0 ppid=33621 pid=54767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151458.608:7547): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151458.819:7548): table=nat:756 family=2 entries=18 op=nft_register_rule pid=54820 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151458.819:7548): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe16a27b50 a2=0 a3=7ffe16a27b3c items=0 ppid=33621 pid=54820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151458.819:7548): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151458.820:7549): table=filter:757 family=2 entries=20 op=nft_register_rule pid=54820 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151458.820:7549): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe16a27b50 a2=0 a3=7ffe16a27b3c items=0 ppid=33621 pid=54820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151458.820:7549): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151488.675:7550): table=nat:758 family=10 entries=14 op=nft_register_rule pid=54889 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151488.675:7550): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdd7603660 a2=0 a3=7ffdd760364c items=0 ppid=33621 pid=54889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151488.675:7550): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151488.676:7551): table=filter:759 family=10 entries=20 op=nft_register_rule pid=54889 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151488.676:7551): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdd7603660 a2=0 a3=7ffdd760364c items=0 ppid=33621 pid=54889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151488.676:7551): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151488.884:7552): table=nat:760 family=2 entries=18 op=nft_register_rule pid=54942 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151488.884:7552): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe834ab6e0 a2=0 a3=7ffe834ab6cc items=0 ppid=33621 pid=54942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151488.884:7552): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151488.884:7553): table=filter:761 family=2 entries=20 op=nft_register_rule pid=54942 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151488.884:7553): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe834ab6e0 a2=0 a3=7ffe834ab6cc items=0 ppid=33621 pid=54942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151488.884:7553): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151518.746:7554): table=nat:762 family=10 entries=14 op=nft_register_rule pid=54995 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151518.746:7554): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff2269e900 a2=0 a3=7fff2269e8ec items=0 ppid=33621 pid=54995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151518.746:7554): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151518.746:7555): table=filter:763 family=10 entries=20 op=nft_register_rule pid=54995 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151518.746:7555): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff2269e900 a2=0 a3=7fff2269e8ec items=0 ppid=33621 pid=54995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151518.746:7555): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151518.951:7556): table=nat:764 family=2 entries=18 op=nft_register_rule pid=55048 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151518.951:7556): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff193c8130 a2=0 a3=7fff193c811c items=0 ppid=33621 pid=55048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151518.951:7556): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151518.952:7557): table=filter:765 family=2 entries=20 op=nft_register_rule pid=55048 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151518.952:7557): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff193c8130 a2=0 a3=7fff193c811c items=0 ppid=33621 pid=55048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151518.952:7557): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151548.813:7558): table=nat:766 family=10 entries=14 op=nft_register_rule pid=55118 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151548.813:7558): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcd057b8b0 a2=0 a3=7ffcd057b89c items=0 ppid=33621 pid=55118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151548.813:7558): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151548.813:7559): table=filter:767 family=10 entries=20 op=nft_register_rule pid=55118 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151548.813:7559): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcd057b8b0 a2=0 a3=7ffcd057b89c items=0 ppid=33621 pid=55118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151548.813:7559): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151549.022:7560): table=nat:768 family=2 entries=18 op=nft_register_rule pid=55171 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151549.022:7560): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff060dd560 a2=0 a3=7fff060dd54c items=0 ppid=33621 pid=55171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151549.022:7560): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151549.023:7561): table=filter:769 family=2 entries=20 op=nft_register_rule pid=55171 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151549.023:7561): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff060dd560 a2=0 a3=7fff060dd54c items=0 ppid=33621 pid=55171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151549.023:7561): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151578.880:7562): table=nat:770 family=10 entries=14 op=nft_register_rule pid=55224 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151578.880:7562): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcb1c291b0 a2=0 a3=7ffcb1c2919c items=0 ppid=33621 pid=55224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151578.880:7562): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151578.880:7563): table=filter:771 family=10 entries=20 op=nft_register_rule pid=55224 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151578.880:7563): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb1c291b0 a2=0 a3=7ffcb1c2919c items=0 ppid=33621 pid=55224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151578.880:7563): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151579.088:7564): table=nat:772 family=2 entries=18 op=nft_register_rule pid=55278 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151579.088:7564): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffe9ca4c20 a2=0 a3=7fffe9ca4c0c items=0 ppid=33621 pid=55278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151579.088:7564): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151579.088:7565): table=filter:773 family=2 entries=20 op=nft_register_rule pid=55278 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151579.088:7565): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe9ca4c20 a2=0 a3=7fffe9ca4c0c items=0 ppid=33621 pid=55278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151579.088:7565): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151608.947:7566): table=nat:774 family=10 entries=14 op=nft_register_rule pid=55347 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151608.947:7566): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd63ee7910 a2=0 a3=7ffd63ee78fc items=0 ppid=33621 pid=55347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151608.947:7566): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151608.948:7567): table=filter:775 family=10 entries=20 op=nft_register_rule pid=55347 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151608.948:7567): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd63ee7910 a2=0 a3=7ffd63ee78fc items=0 ppid=33621 pid=55347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151608.948:7567): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151609.156:7568): table=nat:776 family=2 entries=18 op=nft_register_rule pid=55400 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151609.156:7568): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe7122a390 a2=0 a3=7ffe7122a37c items=0 ppid=33621 pid=55400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151609.156:7568): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151609.157:7569): table=filter:777 family=2 entries=20 op=nft_register_rule pid=55400 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151609.157:7569): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7122a390 a2=0 a3=7ffe7122a37c items=0 ppid=33621 pid=55400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151609.157:7569): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151639.019:7570): table=nat:778 family=10 entries=14 op=nft_register_rule pid=55453 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151639.019:7570): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcb3dce8e0 a2=0 a3=7ffcb3dce8cc items=0 ppid=33621 pid=55453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151639.019:7570): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151639.020:7571): table=filter:779 family=10 entries=20 op=nft_register_rule pid=55453 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151639.020:7571): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb3dce8e0 a2=0 a3=7ffcb3dce8cc items=0 ppid=33621 pid=55453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151639.020:7571): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151639.225:7572): table=nat:780 family=2 entries=18 op=nft_register_rule pid=55506 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151639.225:7572): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe04028720 a2=0 a3=7ffe0402870c items=0 ppid=33621 pid=55506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151639.225:7572): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151639.225:7573): table=filter:781 family=2 entries=20 op=nft_register_rule pid=55506 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151639.225:7573): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe04028720 a2=0 a3=7ffe0402870c items=0 ppid=33621 pid=55506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151639.225:7573): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151669.082:7574): table=nat:782 family=10 entries=14 op=nft_register_rule pid=55582 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151669.082:7574): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffefa787640 a2=0 a3=7ffefa78762c items=0 ppid=33621 pid=55582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151669.082:7574): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151669.083:7575): table=filter:783 family=10 entries=20 op=nft_register_rule pid=55582 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151669.083:7575): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffefa787640 a2=0 a3=7ffefa78762c items=0 ppid=33621 pid=55582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151669.083:7575): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151669.292:7576): table=nat:784 family=2 entries=18 op=nft_register_rule pid=55635 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151669.292:7576): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffc03d1750 a2=0 a3=7fffc03d173c items=0 ppid=33621 pid=55635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151669.292:7576): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151669.292:7577): table=filter:785 family=2 entries=20 op=nft_register_rule pid=55635 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151669.292:7577): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffc03d1750 a2=0 a3=7fffc03d173c items=0 ppid=33621 pid=55635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151669.292:7577): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151699.142:7578): table=nat:786 family=10 entries=14 op=nft_register_rule pid=55689 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151699.142:7578): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff2e0d92b0 a2=0 a3=7fff2e0d929c items=0 ppid=33621 pid=55689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151699.142:7578): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151699.143:7579): table=filter:787 family=10 entries=20 op=nft_register_rule pid=55689 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151699.143:7579): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff2e0d92b0 a2=0 a3=7fff2e0d929c items=0 ppid=33621 pid=55689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151699.143:7579): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151699.356:7580): table=nat:788 family=2 entries=18 op=nft_register_rule pid=55742 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151699.356:7580): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc5dd09860 a2=0 a3=7ffc5dd0984c items=0 ppid=33621 pid=55742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151699.356:7580): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151699.356:7581): table=filter:789 family=2 entries=20 op=nft_register_rule pid=55742 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151699.356:7581): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5dd09860 a2=0 a3=7ffc5dd0984c items=0 ppid=33621 pid=55742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151699.356:7581): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151729.206:7582): table=nat:790 family=10 entries=14 op=nft_register_rule pid=55811 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151729.206:7582): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd34634310 a2=0 a3=7ffd346342fc items=0 ppid=33621 pid=55811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151729.206:7582): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151729.206:7583): table=filter:791 family=10 entries=20 op=nft_register_rule pid=55811 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151729.206:7583): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd34634310 a2=0 a3=7ffd346342fc items=0 ppid=33621 pid=55811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151729.206:7583): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151729.425:7584): table=nat:792 family=2 entries=18 op=nft_register_rule pid=55864 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151729.425:7584): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc721854a0 a2=0 a3=7ffc7218548c items=0 ppid=33621 pid=55864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151729.425:7584): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151729.426:7585): table=filter:793 family=2 entries=20 op=nft_register_rule pid=55864 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151729.426:7585): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc721854a0 a2=0 a3=7ffc7218548c items=0 ppid=33621 pid=55864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151729.426:7585): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151759.269:7586): table=nat:794 family=10 entries=14 op=nft_register_rule pid=55918 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151759.269:7586): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffff617c10 a2=0 a3=7fffff617bfc items=0 ppid=33621 pid=55918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151759.269:7586): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151759.270:7587): table=filter:795 family=10 entries=20 op=nft_register_rule pid=55918 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151759.270:7587): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffff617c10 a2=0 a3=7fffff617bfc items=0 ppid=33621 pid=55918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151759.270:7587): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151759.493:7588): table=nat:796 family=2 entries=18 op=nft_register_rule pid=55972 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151759.493:7588): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffecec117c0 a2=0 a3=7ffecec117ac items=0 ppid=33621 pid=55972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151759.493:7588): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151759.493:7589): table=filter:797 family=2 entries=20 op=nft_register_rule pid=55972 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151759.493:7589): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffecec117c0 a2=0 a3=7ffecec117ac items=0 ppid=33621 pid=55972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151759.493:7589): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151789.341:7590): table=nat:798 family=10 entries=14 op=nft_register_rule pid=56035 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151789.341:7590): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffca43c9e10 a2=0 a3=7ffca43c9dfc items=0 ppid=33621 pid=56035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151789.341:7590): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151789.342:7591): table=filter:799 family=10 entries=20 op=nft_register_rule pid=56035 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151789.342:7591): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca43c9e10 a2=0 a3=7ffca43c9dfc items=0 ppid=33621 pid=56035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151789.342:7591): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151789.563:7592): table=nat:800 family=2 entries=18 op=nft_register_rule pid=56088 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151789.563:7592): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe6f644850 a2=0 a3=7ffe6f64483c items=0 ppid=33621 pid=56088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151789.563:7592): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151789.563:7593): table=filter:801 family=2 entries=20 op=nft_register_rule pid=56088 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151789.563:7593): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe6f644850 a2=0 a3=7ffe6f64483c items=0 ppid=33621 pid=56088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151789.563:7593): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151819.404:7594): table=nat:802 family=10 entries=14 op=nft_register_rule pid=56148 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151819.404:7594): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff9fc5ffd0 a2=0 a3=7fff9fc5ffbc items=0 ppid=33621 pid=56148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151819.404:7594): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151819.404:7595): table=filter:803 family=10 entries=20 op=nft_register_rule pid=56148 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151819.404:7595): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff9fc5ffd0 a2=0 a3=7fff9fc5ffbc items=0 ppid=33621 pid=56148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151819.404:7595): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151819.631:7596): table=nat:804 family=2 entries=18 op=nft_register_rule pid=56202 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151819.631:7596): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc2a5919b0 a2=0 a3=7ffc2a59199c items=0 ppid=33621 pid=56202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151819.631:7596): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151819.631:7597): table=filter:805 family=2 entries=20 op=nft_register_rule pid=56202 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151819.631:7597): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc2a5919b0 a2=0 a3=7ffc2a59199c items=0 ppid=33621 pid=56202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151819.631:7597): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151849.473:7598): table=nat:806 family=10 entries=14 op=nft_register_rule pid=56264 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151849.473:7598): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdfe010510 a2=0 a3=7ffdfe0104fc items=0 ppid=33621 pid=56264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151849.473:7598): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151849.474:7599): table=filter:807 family=10 entries=20 op=nft_register_rule pid=56264 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151849.474:7599): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdfe010510 a2=0 a3=7ffdfe0104fc items=0 ppid=33621 pid=56264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151849.474:7599): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151849.695:7600): table=nat:808 family=2 entries=18 op=nft_register_rule pid=56317 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151849.695:7600): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff18b8b350 a2=0 a3=7fff18b8b33c items=0 ppid=33621 pid=56317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151849.695:7600): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151849.695:7601): table=filter:809 family=2 entries=20 op=nft_register_rule pid=56317 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151849.695:7601): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff18b8b350 a2=0 a3=7fff18b8b33c items=0 ppid=33621 pid=56317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151849.695:7601): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151879.541:7602): table=nat:810 family=10 entries=14 op=nft_register_rule pid=56378 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151879.541:7602): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffb9dc4770 a2=0 a3=7fffb9dc475c items=0 ppid=33621 pid=56378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151879.541:7602): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151879.542:7603): table=filter:811 family=10 entries=20 op=nft_register_rule pid=56378 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151879.542:7603): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffb9dc4770 a2=0 a3=7fffb9dc475c items=0 ppid=33621 pid=56378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151879.542:7603): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151879.760:7604): table=nat:812 family=2 entries=18 op=nft_register_rule pid=56431 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151879.760:7604): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff42407f40 a2=0 a3=7fff42407f2c items=0 ppid=33621 pid=56431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151879.760:7604): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151879.761:7605): table=filter:813 family=2 entries=20 op=nft_register_rule pid=56431 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151879.761:7605): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff42407f40 a2=0 a3=7fff42407f2c items=0 ppid=33621 pid=56431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151879.761:7605): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151909.603:7606): table=nat:814 family=10 entries=14 op=nft_register_rule pid=56493 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151909.603:7606): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc87e88790 a2=0 a3=7ffc87e8877c items=0 ppid=33621 pid=56493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151909.603:7606): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151909.604:7607): table=filter:815 family=10 entries=20 op=nft_register_rule pid=56493 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151909.604:7607): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc87e88790 a2=0 a3=7ffc87e8877c items=0 ppid=33621 pid=56493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151909.604:7607): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151909.832:7608): table=nat:816 family=2 entries=18 op=nft_register_rule pid=56546 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151909.832:7608): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff97bbf380 a2=0 a3=7fff97bbf36c items=0 ppid=33621 pid=56546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151909.832:7608): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151909.833:7609): table=filter:817 family=2 entries=20 op=nft_register_rule pid=56546 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151909.833:7609): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff97bbf380 a2=0 a3=7fff97bbf36c items=0 ppid=33621 pid=56546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151909.833:7609): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151939.668:7610): table=nat:818 family=10 entries=14 op=nft_register_rule pid=56606 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151939.668:7610): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffeee877050 a2=0 a3=7ffeee87703c items=0 ppid=33621 pid=56606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151939.668:7610): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151939.668:7611): table=filter:819 family=10 entries=20 op=nft_register_rule pid=56606 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151939.668:7611): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeee877050 a2=0 a3=7ffeee87703c items=0 ppid=33621 pid=56606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151939.668:7611): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151939.905:7612): table=nat:820 family=2 entries=18 op=nft_register_rule pid=56659 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151939.905:7612): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd483dfa50 a2=0 a3=7ffd483dfa3c items=0 ppid=33621 pid=56659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151939.905:7612): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151939.905:7613): table=filter:821 family=2 entries=20 op=nft_register_rule pid=56659 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151939.905:7613): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd483dfa50 a2=0 a3=7ffd483dfa3c items=0 ppid=33621 pid=56659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151939.905:7613): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151969.737:7614): table=nat:822 family=10 entries=14 op=nft_register_rule pid=56728 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151969.737:7614): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdf1524830 a2=0 a3=7ffdf152481c items=0 ppid=33621 pid=56728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151969.737:7614): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151969.737:7615): table=filter:823 family=10 entries=20 op=nft_register_rule pid=56728 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151969.737:7615): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf1524830 a2=0 a3=7ffdf152481c items=0 ppid=33621 pid=56728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151969.737:7615): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151969.978:7616): table=nat:824 family=2 entries=18 op=nft_register_rule pid=56781 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151969.978:7616): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe76edf040 a2=0 a3=7ffe76edf02c items=0 ppid=33621 pid=56781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151969.978:7616): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151969.978:7617): table=filter:825 family=2 entries=20 op=nft_register_rule pid=56781 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739151969.978:7617): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe76edf040 a2=0 a3=7ffe76edf02c items=0 ppid=33621 pid=56781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151969.978:7617): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151999.811:7618): table=nat:826 family=10 entries=14 op=nft_register_rule pid=56841 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151999.811:7618): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe83469db0 a2=0 a3=7ffe83469d9c items=0 ppid=33621 pid=56841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151999.811:7618): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739151999.811:7619): table=filter:827 family=10 entries=20 op=nft_register_rule pid=56841 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739151999.811:7619): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe83469db0 a2=0 a3=7ffe83469d9c items=0 ppid=33621 pid=56841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739151999.811:7619): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152000.047:7620): table=nat:828 family=2 entries=18 op=nft_register_rule pid=56895 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152000.047:7620): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc61ee5f20 a2=0 a3=7ffc61ee5f0c items=0 ppid=33621 pid=56895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152000.047:7620): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152000.047:7621): table=filter:829 family=2 entries=20 op=nft_register_rule pid=56895 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152000.047:7621): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc61ee5f20 a2=0 a3=7ffc61ee5f0c items=0 ppid=33621 pid=56895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152000.047:7621): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152029.876:7622): table=nat:830 family=10 entries=14 op=nft_register_rule pid=56959 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152029.876:7622): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcdf9a3a70 a2=0 a3=7ffcdf9a3a5c items=0 ppid=33621 pid=56959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152029.876:7622): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152029.876:7623): table=filter:831 family=10 entries=20 op=nft_register_rule pid=56959 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152029.876:7623): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcdf9a3a70 a2=0 a3=7ffcdf9a3a5c items=0 ppid=33621 pid=56959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152029.876:7623): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152030.112:7624): table=nat:832 family=2 entries=18 op=nft_register_rule pid=57012 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152030.112:7624): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffeb69789b0 a2=0 a3=7ffeb697899c items=0 ppid=33621 pid=57012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152030.112:7624): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152030.112:7625): table=filter:833 family=2 entries=20 op=nft_register_rule pid=57012 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152030.112:7625): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeb69789b0 a2=0 a3=7ffeb697899c items=0 ppid=33621 pid=57012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152030.112:7625): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152059.938:7626): table=nat:834 family=10 entries=14 op=nft_register_rule pid=57072 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152059.938:7626): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffecdab1be0 a2=0 a3=7ffecdab1bcc items=0 ppid=33621 pid=57072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152059.938:7626): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152059.939:7627): table=filter:835 family=10 entries=20 op=nft_register_rule pid=57072 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152059.939:7627): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffecdab1be0 a2=0 a3=7ffecdab1bcc items=0 ppid=33621 pid=57072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152059.939:7627): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152060.190:7628): table=nat:836 family=2 entries=18 op=nft_register_rule pid=57125 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152060.190:7628): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff6e88ec00 a2=0 a3=7fff6e88ebec items=0 ppid=33621 pid=57125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152060.190:7628): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152060.190:7629): table=filter:837 family=2 entries=20 op=nft_register_rule pid=57125 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152060.190:7629): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff6e88ec00 a2=0 a3=7fff6e88ebec items=0 ppid=33621 pid=57125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152060.190:7629): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152090.006:7630): table=nat:838 family=10 entries=14 op=nft_register_rule pid=57187 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152090.006:7630): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe4dc92860 a2=0 a3=7ffe4dc9284c items=0 ppid=33621 pid=57187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152090.006:7630): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152090.006:7631): table=filter:839 family=10 entries=20 op=nft_register_rule pid=57187 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152090.006:7631): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe4dc92860 a2=0 a3=7ffe4dc9284c items=0 ppid=33621 pid=57187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152090.006:7631): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152090.257:7632): table=nat:840 family=2 entries=18 op=nft_register_rule pid=57240 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152090.257:7632): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd9873c5c0 a2=0 a3=7ffd9873c5ac items=0 ppid=33621 pid=57240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152090.257:7632): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152090.258:7633): table=filter:841 family=2 entries=20 op=nft_register_rule pid=57240 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152090.258:7633): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd9873c5c0 a2=0 a3=7ffd9873c5ac items=0 ppid=33621 pid=57240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152090.258:7633): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_START msg=audit(1739152106.340:7634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739152106.340:7635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739152120.076:7636): table=nat:842 family=10 entries=14 op=nft_register_rule pid=57296 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152120.076:7636): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdc6279bc0 a2=0 a3=7ffdc6279bac items=0 ppid=33621 pid=57296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152120.076:7636): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152120.076:7637): table=filter:843 family=10 entries=20 op=nft_register_rule pid=57296 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152120.076:7637): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc6279bc0 a2=0 a3=7ffdc6279bac items=0 ppid=33621 pid=57296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152120.076:7637): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152120.324:7638): table=nat:844 family=2 entries=18 op=nft_register_rule pid=57349 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152120.324:7638): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe24fd6d90 a2=0 a3=7ffe24fd6d7c items=0 ppid=33621 pid=57349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152120.324:7638): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152120.325:7639): table=filter:845 family=2 entries=20 op=nft_register_rule pid=57349 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152120.325:7639): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe24fd6d90 a2=0 a3=7ffe24fd6d7c items=0 ppid=33621 pid=57349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152120.325:7639): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152150.150:7640): table=nat:846 family=10 entries=14 op=nft_register_rule pid=57419 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152150.150:7640): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe41957cc0 a2=0 a3=7ffe41957cac items=0 ppid=33621 pid=57419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152150.150:7640): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152150.151:7641): table=filter:847 family=10 entries=20 op=nft_register_rule pid=57419 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152150.151:7641): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe41957cc0 a2=0 a3=7ffe41957cac items=0 ppid=33621 pid=57419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152150.151:7641): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152150.398:7642): table=nat:848 family=2 entries=18 op=nft_register_rule pid=57473 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152150.398:7642): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffda26093a0 a2=0 a3=7ffda260938c items=0 ppid=33621 pid=57473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152150.398:7642): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152150.399:7643): table=filter:849 family=2 entries=20 op=nft_register_rule pid=57473 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152150.399:7643): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffda26093a0 a2=0 a3=7ffda260938c items=0 ppid=33621 pid=57473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152150.399:7643): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152180.220:7644): table=nat:850 family=10 entries=14 op=nft_register_rule pid=57526 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152180.220:7644): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe7135d620 a2=0 a3=7ffe7135d60c items=0 ppid=33621 pid=57526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152180.220:7644): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152180.221:7645): table=filter:851 family=10 entries=20 op=nft_register_rule pid=57526 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152180.221:7645): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7135d620 a2=0 a3=7ffe7135d60c items=0 ppid=33621 pid=57526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152180.221:7645): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152180.468:7646): table=nat:852 family=2 entries=18 op=nft_register_rule pid=57579 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152180.468:7646): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffff519c2c0 a2=0 a3=7ffff519c2ac items=0 ppid=33621 pid=57579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152180.468:7646): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152180.469:7647): table=filter:853 family=2 entries=20 op=nft_register_rule pid=57579 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152180.469:7647): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffff519c2c0 a2=0 a3=7ffff519c2ac items=0 ppid=33621 pid=57579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152180.469:7647): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152210.292:7648): table=nat:854 family=10 entries=14 op=nft_register_rule pid=57648 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152210.292:7648): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffccaa900d0 a2=0 a3=7ffccaa900bc items=0 ppid=33621 pid=57648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152210.292:7648): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152210.293:7649): table=filter:855 family=10 entries=20 op=nft_register_rule pid=57648 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152210.293:7649): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffccaa900d0 a2=0 a3=7ffccaa900bc items=0 ppid=33621 pid=57648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152210.293:7649): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152210.535:7650): table=nat:856 family=2 entries=18 op=nft_register_rule pid=57701 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152210.535:7650): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffe5f987b0 a2=0 a3=7fffe5f9879c items=0 ppid=33621 pid=57701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152210.535:7650): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152210.536:7651): table=filter:857 family=2 entries=20 op=nft_register_rule pid=57701 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152210.536:7651): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe5f987b0 a2=0 a3=7fffe5f9879c items=0 ppid=33621 pid=57701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152210.536:7651): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152240.358:7652): table=nat:858 family=10 entries=14 op=nft_register_rule pid=57754 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152240.358:7652): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe61340a30 a2=0 a3=7ffe61340a1c items=0 ppid=33621 pid=57754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152240.358:7652): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152240.358:7653): table=filter:859 family=10 entries=20 op=nft_register_rule pid=57754 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152240.358:7653): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe61340a30 a2=0 a3=7ffe61340a1c items=0 ppid=33621 pid=57754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152240.358:7653): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152240.601:7654): table=nat:860 family=2 entries=18 op=nft_register_rule pid=57807 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152240.601:7654): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd0be5a380 a2=0 a3=7ffd0be5a36c items=0 ppid=33621 pid=57807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152240.601:7654): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152240.602:7655): table=filter:861 family=2 entries=20 op=nft_register_rule pid=57807 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152240.602:7655): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0be5a380 a2=0 a3=7ffd0be5a36c items=0 ppid=33621 pid=57807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152240.602:7655): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152270.425:7656): table=nat:862 family=10 entries=14 op=nft_register_rule pid=57883 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152270.425:7656): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcc9fedea0 a2=0 a3=7ffcc9fede8c items=0 ppid=33621 pid=57883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152270.425:7656): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152270.426:7657): table=filter:863 family=10 entries=20 op=nft_register_rule pid=57883 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152270.426:7657): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcc9fedea0 a2=0 a3=7ffcc9fede8c items=0 ppid=33621 pid=57883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152270.426:7657): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152270.668:7658): table=nat:864 family=2 entries=18 op=nft_register_rule pid=57936 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152270.668:7658): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff590429b0 a2=0 a3=7fff5904299c items=0 ppid=33621 pid=57936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152270.668:7658): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152270.668:7659): table=filter:865 family=2 entries=20 op=nft_register_rule pid=57936 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152270.668:7659): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff590429b0 a2=0 a3=7fff5904299c items=0 ppid=33621 pid=57936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152270.668:7659): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152300.490:7660): table=nat:866 family=10 entries=14 op=nft_register_rule pid=57989 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152300.490:7660): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff5a4ac760 a2=0 a3=7fff5a4ac74c items=0 ppid=33621 pid=57989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152300.490:7660): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152300.491:7661): table=filter:867 family=10 entries=20 op=nft_register_rule pid=57989 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152300.491:7661): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff5a4ac760 a2=0 a3=7fff5a4ac74c items=0 ppid=33621 pid=57989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152300.491:7661): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152300.738:7662): table=nat:868 family=2 entries=18 op=nft_register_rule pid=58042 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152300.738:7662): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffee74cbe30 a2=0 a3=7ffee74cbe1c items=0 ppid=33621 pid=58042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152300.738:7662): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152300.739:7663): table=filter:869 family=2 entries=20 op=nft_register_rule pid=58042 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152300.739:7663): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee74cbe30 a2=0 a3=7ffee74cbe1c items=0 ppid=33621 pid=58042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152300.739:7663): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152330.562:7664): table=nat:870 family=10 entries=14 op=nft_register_rule pid=58111 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152330.562:7664): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe54aaca00 a2=0 a3=7ffe54aac9ec items=0 ppid=33621 pid=58111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152330.562:7664): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152330.563:7665): table=filter:871 family=10 entries=20 op=nft_register_rule pid=58111 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152330.563:7665): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe54aaca00 a2=0 a3=7ffe54aac9ec items=0 ppid=33621 pid=58111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152330.563:7665): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152330.816:7666): table=nat:872 family=2 entries=18 op=nft_register_rule pid=58164 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152330.816:7666): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdeb046520 a2=0 a3=7ffdeb04650c items=0 ppid=33621 pid=58164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152330.816:7666): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152330.817:7667): table=filter:873 family=2 entries=20 op=nft_register_rule pid=58164 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152330.817:7667): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdeb046520 a2=0 a3=7ffdeb04650c items=0 ppid=33621 pid=58164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152330.817:7667): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152360.628:7668): table=nat:874 family=10 entries=14 op=nft_register_rule pid=58217 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152360.628:7668): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcb5dba870 a2=0 a3=7ffcb5dba85c items=0 ppid=33621 pid=58217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152360.628:7668): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152360.628:7669): table=filter:875 family=10 entries=20 op=nft_register_rule pid=58217 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152360.628:7669): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb5dba870 a2=0 a3=7ffcb5dba85c items=0 ppid=33621 pid=58217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152360.628:7669): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152360.885:7670): table=nat:876 family=2 entries=18 op=nft_register_rule pid=58270 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152360.885:7670): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe13ba1a60 a2=0 a3=7ffe13ba1a4c items=0 ppid=33621 pid=58270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152360.885:7670): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152360.886:7671): table=filter:877 family=2 entries=20 op=nft_register_rule pid=58270 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152360.886:7671): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe13ba1a60 a2=0 a3=7ffe13ba1a4c items=0 ppid=33621 pid=58270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152360.886:7671): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152390.698:7672): table=nat:878 family=10 entries=14 op=nft_register_rule pid=58340 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152390.698:7672): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe12d83170 a2=0 a3=7ffe12d8315c items=0 ppid=33621 pid=58340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152390.698:7672): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152390.698:7673): table=filter:879 family=10 entries=20 op=nft_register_rule pid=58340 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152390.698:7673): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe12d83170 a2=0 a3=7ffe12d8315c items=0 ppid=33621 pid=58340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152390.698:7673): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152390.950:7674): table=nat:880 family=2 entries=18 op=nft_register_rule pid=58393 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152390.950:7674): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe384fcd40 a2=0 a3=7ffe384fcd2c items=0 ppid=33621 pid=58393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152390.950:7674): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152390.950:7675): table=filter:881 family=2 entries=20 op=nft_register_rule pid=58393 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152390.950:7675): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe384fcd40 a2=0 a3=7ffe384fcd2c items=0 ppid=33621 pid=58393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152390.950:7675): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152420.773:7676): table=nat:882 family=10 entries=14 op=nft_register_rule pid=58446 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152420.773:7676): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffaf8636e0 a2=0 a3=7fffaf8636cc items=0 ppid=33621 pid=58446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152420.773:7676): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152420.773:7677): table=filter:883 family=10 entries=20 op=nft_register_rule pid=58446 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152420.773:7677): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffaf8636e0 a2=0 a3=7fffaf8636cc items=0 ppid=33621 pid=58446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152420.773:7677): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152421.021:7678): table=nat:884 family=2 entries=18 op=nft_register_rule pid=58499 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152421.021:7678): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcbd2d35c0 a2=0 a3=7ffcbd2d35ac items=0 ppid=33621 pid=58499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152421.021:7678): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152421.021:7679): table=filter:885 family=2 entries=20 op=nft_register_rule pid=58499 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152421.021:7679): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcbd2d35c0 a2=0 a3=7ffcbd2d35ac items=0 ppid=33621 pid=58499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152421.021:7679): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152450.838:7680): table=nat:886 family=10 entries=14 op=nft_register_rule pid=58561 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152450.838:7680): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffff31a0c0 a2=0 a3=7fffff31a0ac items=0 ppid=33621 pid=58561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152450.838:7680): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152450.838:7681): table=filter:887 family=10 entries=20 op=nft_register_rule pid=58561 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152450.838:7681): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffff31a0c0 a2=0 a3=7fffff31a0ac items=0 ppid=33621 pid=58561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152450.838:7681): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152451.086:7682): table=nat:888 family=2 entries=18 op=nft_register_rule pid=58615 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152451.086:7682): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffef4a451a0 a2=0 a3=7ffef4a4518c items=0 ppid=33621 pid=58615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152451.086:7682): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152451.087:7683): table=filter:889 family=2 entries=20 op=nft_register_rule pid=58615 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152451.087:7683): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef4a451a0 a2=0 a3=7ffef4a4518c items=0 ppid=33621 pid=58615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152451.087:7683): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1739152458.832:7684): pid=58625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739152458.832:7685): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=58625 suid=74 rport=57568 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739152458.833:7686): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=58625 suid=74 rport=57568 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739152458.894:7687): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152458.894:7688): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739152458.924:7689): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152458.925:7690): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58625 suid=74 rport=57568 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739152458.926:7691): pid=58624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739152458.926:7692): pid=58624 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739152458.926:7692): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd3aade830 a2=4 a3=3e8 items=0 ppid=10335 pid=58624 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152458.926:7692): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739152458.927:7693): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739152458.953:7694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739152458.990:7695): pid=58628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1739152458.990:7696): pid=58628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1739152458.991:7697): pid=58628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739152458.991:7698): pid=58628 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739152458.991:7698): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc8c4ef370 a2=4 a3=3e8 items=0 ppid=1 pid=58628 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152458.991:7698): proctitle="(systemd)"
type=USER_START msg=audit(1739152458.993:7699): pid=58628 uid=0 auid=1000 ses=27 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739152459.070:7700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1739152459.085:7701): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.086:7702): pid=58639 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739152459.087:7703): pid=58639 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739152459.132:7704): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739152459.132:7705): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.133:7706): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.359:7707): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58639 suid=1000 rport=57568 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.359:7708): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739152459.361:7709): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739152459.361:7710): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739152459.361:7711): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739152459.361:7712): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.362:7713): pid=58624 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739152459.374:7714): pid=58655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739152459.376:7715): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=58655 suid=74 rport=57578 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739152459.376:7716): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=58655 suid=74 rport=57578 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739152459.437:7717): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152459.437:7718): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739152459.467:7719): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152459.467:7720): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58655 suid=74 rport=57578 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739152459.469:7721): pid=58654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739152459.469:7722): pid=58654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739152459.469:7722): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee1779c00 a2=4 a3=3e8 items=0 ppid=10335 pid=58654 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152459.469:7722): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739152459.469:7723): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739152459.488:7724): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.489:7725): pid=58657 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739152459.490:7726): pid=58657 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739152459.532:7727): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739152459.532:7728): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152459.533:7729): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739152460.392:7730): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739152460.392:7731): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D7266202F686F6D652F726F636B792F74662D636F6E7461696E65722D6275696C646572 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739152460.393:7732): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739152460.394:7733): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739152460.396:7734): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739152460.396:7735): pid=58800 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.478:7736): pid=58834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739152460.479:7737): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=58834 suid=74 rport=46652 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739152460.479:7738): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=58834 suid=74 rport=46652 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1739152460.592:7739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1739152460.616:7740): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152460.616:7741): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739152460.647:7742): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152460.647:7743): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58834 suid=74 rport=46652 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739152460.648:7744): pid=58833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739152460.649:7745): pid=58833 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739152460.649:7745): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9ebdc300 a2=4 a3=3e8 items=0 ppid=10335 pid=58833 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152460.649:7745): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739152460.649:7746): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739152460.667:7747): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.667:7748): pid=58838 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58838 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739152460.668:7749): pid=58838 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739152460.709:7750): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739152460.709:7751): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.710:7752): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739152460.731:7753): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739152460.731:7754): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.732:7755): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58838 suid=1000 rport=46652 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.732:7756): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58838 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739152460.733:7757): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739152460.733:7758): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.733:7759): pid=58833 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739152460.747:7760): pid=58854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739152460.748:7761): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=58854 suid=74 rport=46654 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739152460.748:7762): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=58854 suid=74 rport=46654 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739152460.820:7763): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152460.820:7764): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739152460.851:7765): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739152460.851:7766): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58854 suid=74 rport=46654 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739152460.853:7767): pid=58853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739152460.853:7768): pid=58853 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739152460.853:7768): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe2d288600 a2=4 a3=3e8 items=0 ppid=10335 pid=58853 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152460.853:7768): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739152460.854:7769): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739152460.868:7770): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.869:7771): pid=58856 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739152460.870:7772): pid=58856 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739152460.911:7773): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739152460.911:7774): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.912:7775): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.957:7776): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58856 suid=1000 rport=46654 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.957:7777): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58856 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739152460.959:7778): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739152460.959:7779): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739152460.959:7780): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739152460.959:7781): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739152460.959:7782): pid=58853 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=NETFILTER_CFG msg=audit(1739152461.372:7783): table=nat:890 family=2 entries=18 op=nft_register_rule pid=59043 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152461.372:7783): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe34cd1210 a2=0 a3=7ffe34cd11fc items=0 ppid=33621 pid=59043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.372:7783): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.372:7784): table=filter:891 family=2 entries=20 op=nft_register_rule pid=59043 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152461.372:7784): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe34cd1210 a2=0 a3=7ffe34cd11fc items=0 ppid=33621 pid=59043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.372:7784): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.391:7785): table=nat:892 family=10 entries=14 op=nft_register_rule pid=59052 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152461.391:7785): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffeafe9b750 a2=0 a3=7ffeafe9b73c items=0 ppid=33621 pid=59052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.391:7785): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.396:7786): table=filter:893 family=10 entries=20 op=nft_register_rule pid=59052 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152461.396:7786): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffeafe9b750 a2=0 a3=7ffeafe9b73c items=0 ppid=33621 pid=59052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.396:7786): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.844:7787): table=nat:894 family=2 entries=18 op=nft_register_rule pid=59212 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152461.844:7787): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdfafbadb0 a2=0 a3=7ffdfafbad9c items=0 ppid=33621 pid=59212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.844:7787): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.845:7788): table=filter:895 family=2 entries=20 op=nft_register_rule pid=59212 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152461.845:7788): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdfafbadb0 a2=0 a3=7ffdfafbad9c items=0 ppid=33621 pid=59212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.845:7788): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.853:7789): table=nat:896 family=10 entries=14 op=nft_register_rule pid=59218 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152461.853:7789): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffed2921e60 a2=0 a3=7ffed2921e4c items=0 ppid=33621 pid=59218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.853:7789): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152461.868:7790): table=filter:897 family=10 entries=20 op=nft_register_rule pid=59218 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152461.868:7790): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffed2921e60 a2=0 a3=7ffed2921e4c items=0 ppid=33621 pid=59218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152461.868:7790): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.070:7791): table=nat:898 family=10 entries=14 op=nft_register_rule pid=59354 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.070:7791): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdb993dd70 a2=0 a3=7ffdb993dd5c items=0 ppid=33621 pid=59354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.070:7791): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.071:7792): table=filter:899 family=10 entries=20 op=nft_register_rule pid=59354 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.071:7792): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb993dd70 a2=0 a3=7ffdb993dd5c items=0 ppid=33621 pid=59354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.071:7792): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.079:7793): table=nat:900 family=2 entries=18 op=nft_register_rule pid=59357 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.079:7793): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffec7dfd7e0 a2=0 a3=7ffec7dfd7cc items=0 ppid=33621 pid=59357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.079:7793): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.092:7794): table=filter:901 family=2 entries=20 op=nft_register_rule pid=59357 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.092:7794): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffec7dfd7e0 a2=0 a3=7ffec7dfd7cc items=0 ppid=33621 pid=59357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.092:7794): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.312:7795): table=nat:902 family=10 entries=14 op=nft_register_rule pid=59493 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.312:7795): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc5b6ca200 a2=0 a3=7ffc5b6ca1ec items=0 ppid=33621 pid=59493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.312:7795): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.313:7796): table=filter:903 family=10 entries=20 op=nft_register_rule pid=59493 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.313:7796): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc5b6ca200 a2=0 a3=7ffc5b6ca1ec items=0 ppid=33621 pid=59493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.313:7796): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.320:7797): table=nat:904 family=2 entries=18 op=nft_register_rule pid=59495 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.320:7797): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc1a51b0b0 a2=0 a3=7ffc1a51b09c items=0 ppid=33621 pid=59495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.320:7797): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.325:7798): table=filter:905 family=2 entries=20 op=nft_register_rule pid=59495 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.325:7798): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc1a51b0b0 a2=0 a3=7ffc1a51b09c items=0 ppid=33621 pid=59495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.325:7798): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.556:7799): table=nat:906 family=10 entries=14 op=nft_register_rule pid=59633 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.556:7799): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffa49a5be0 a2=0 a3=7fffa49a5bcc items=0 ppid=33621 pid=59633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.556:7799): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.557:7800): table=filter:907 family=10 entries=20 op=nft_register_rule pid=59633 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.557:7800): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa49a5be0 a2=0 a3=7fffa49a5bcc items=0 ppid=33621 pid=59633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.557:7800): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.561:7801): table=nat:908 family=2 entries=18 op=nft_register_rule pid=59636 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.561:7801): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa8e38880 a2=0 a3=7fffa8e3886c items=0 ppid=33621 pid=59636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.561:7801): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.570:7802): table=filter:909 family=2 entries=20 op=nft_register_rule pid=59636 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.570:7802): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa8e38880 a2=0 a3=7fffa8e3886c items=0 ppid=33621 pid=59636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.570:7802): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.791:7803): table=nat:910 family=10 entries=14 op=nft_register_rule pid=59765 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.791:7803): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe7704d2a0 a2=0 a3=7ffe7704d28c items=0 ppid=33621 pid=59765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.791:7803): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.792:7804): table=filter:911 family=10 entries=20 op=nft_register_rule pid=59765 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152462.792:7804): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7704d2a0 a2=0 a3=7ffe7704d28c items=0 ppid=33621 pid=59765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.792:7804): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.803:7805): table=nat:912 family=2 entries=18 op=nft_register_rule pid=59775 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.803:7805): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcfcd01600 a2=0 a3=7ffcfcd015ec items=0 ppid=33621 pid=59775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.803:7805): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152462.805:7806): table=filter:913 family=2 entries=20 op=nft_register_rule pid=59775 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152462.805:7806): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcfcd01600 a2=0 a3=7ffcfcd015ec items=0 ppid=33621 pid=59775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152462.805:7806): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.039:7807): table=nat:914 family=2 entries=18 op=nft_register_rule pid=59910 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.039:7807): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff4c985820 a2=0 a3=7fff4c98580c items=0 ppid=33621 pid=59910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.039:7807): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.040:7808): table=filter:915 family=2 entries=20 op=nft_register_rule pid=59910 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.040:7808): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4c985820 a2=0 a3=7fff4c98580c items=0 ppid=33621 pid=59910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.040:7808): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.045:7809): table=nat:916 family=10 entries=14 op=nft_register_rule pid=59913 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.045:7809): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc8faa1cf0 a2=0 a3=7ffc8faa1cdc items=0 ppid=33621 pid=59913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.045:7809): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.049:7810): table=filter:917 family=10 entries=20 op=nft_register_rule pid=59913 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.049:7810): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc8faa1cf0 a2=0 a3=7ffc8faa1cdc items=0 ppid=33621 pid=59913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.049:7810): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.283:7811): table=nat:918 family=10 entries=14 op=nft_register_rule pid=60048 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.283:7811): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdf1a83a00 a2=0 a3=7ffdf1a839ec items=0 ppid=33621 pid=60048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.283:7811): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.284:7812): table=filter:919 family=10 entries=20 op=nft_register_rule pid=60048 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.284:7812): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdf1a83a00 a2=0 a3=7ffdf1a839ec items=0 ppid=33621 pid=60048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.284:7812): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.289:7813): table=nat:920 family=2 entries=18 op=nft_register_rule pid=60050 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.289:7813): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd7b27d0e0 a2=0 a3=7ffd7b27d0cc items=0 ppid=33621 pid=60050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.289:7813): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.295:7814): table=filter:921 family=2 entries=20 op=nft_register_rule pid=60050 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.295:7814): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7b27d0e0 a2=0 a3=7ffd7b27d0cc items=0 ppid=33621 pid=60050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.295:7814): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.510:7815): table=nat:922 family=10 entries=14 op=nft_register_rule pid=60174 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.510:7815): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd46a77be0 a2=0 a3=7ffd46a77bcc items=0 ppid=33621 pid=60174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.510:7815): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.511:7816): table=filter:923 family=10 entries=20 op=nft_register_rule pid=60174 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152463.511:7816): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd46a77be0 a2=0 a3=7ffd46a77bcc items=0 ppid=33621 pid=60174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.511:7816): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.523:7817): table=nat:924 family=2 entries=18 op=nft_register_rule pid=60179 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.523:7817): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe5946bfd0 a2=0 a3=7ffe5946bfbc items=0 ppid=33621 pid=60179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.523:7817): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152463.524:7818): table=filter:925 family=2 entries=20 op=nft_register_rule pid=60179 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152463.524:7818): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe5946bfd0 a2=0 a3=7ffe5946bfbc items=0 ppid=33621 pid=60179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152463.524:7818): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152465.020:7819): prog-id=257 op=LOAD
type=SYSCALL msg=audit(1739152465.020:7819): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000290fa0 items=0 ppid=60286 pid=60304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.020:7819): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31343138636339333466366631386361326261616332363238
type=BPF msg=audit(1739152465.020:7820): prog-id=258 op=LOAD
type=SYSCALL msg=audit(1739152465.020:7820): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000290fe8 items=0 ppid=60286 pid=60304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.020:7820): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31343138636339333466366631386361326261616332363238
type=BPF msg=audit(1739152465.020:7821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152465.020:7822): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152465.020:7823): prog-id=259 op=LOAD
type=SYSCALL msg=audit(1739152465.020:7823): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000291078 items=0 ppid=60286 pid=60304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.020:7823): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31343138636339333466366631386361326261616332363238
type=BPF msg=audit(1739152465.021:7824): prog-id=260 op=LOAD
type=SYSCALL msg=audit(1739152465.021:7824): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000302730 items=0 ppid=60302 pid=60314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.021:7824): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35626230623634383232333765336231643438323139373037
type=BPF msg=audit(1739152465.021:7825): prog-id=261 op=LOAD
type=SYSCALL msg=audit(1739152465.021:7825): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000302778 items=0 ppid=60302 pid=60314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.021:7825): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35626230623634383232333765336231643438323139373037
type=BPF msg=audit(1739152465.021:7826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152465.021:7827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152465.021:7828): prog-id=262 op=LOAD
type=SYSCALL msg=audit(1739152465.021:7828): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000302808 items=0 ppid=60302 pid=60314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152465.021:7828): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35626230623634383232333765336231643438323139373037
type=BPF msg=audit(1739152474.368:7829): prog-id=263 op=LOAD
type=SYSCALL msg=audit(1739152474.368:7829): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00018d9d8 a2=78 a3=c000330bf0 items=0 ppid=60672 pid=60691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.368:7829): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64613766653736643032376563393964393666303634373061
type=BPF msg=audit(1739152474.368:7830): prog-id=264 op=LOAD
type=SYSCALL msg=audit(1739152474.368:7830): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00018d770 a2=78 a3=c000330c38 items=0 ppid=60672 pid=60691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.368:7830): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64613766653736643032376563393964393666303634373061
type=BPF msg=audit(1739152474.368:7831): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152474.368:7832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152474.368:7833): prog-id=265 op=LOAD
type=SYSCALL msg=audit(1739152474.368:7833): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00018dc30 a2=78 a3=c000330cc8 items=0 ppid=60672 pid=60691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.368:7833): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64613766653736643032376563393964393666303634373061
type=BPF msg=audit(1739152474.370:7834): prog-id=266 op=LOAD
type=SYSCALL msg=audit(1739152474.370:7834): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c00039c160 items=0 ppid=60692 pid=60707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.370:7834): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363137653438613530616165653239313338346663643534
type=BPF msg=audit(1739152474.370:7835): prog-id=267 op=LOAD
type=SYSCALL msg=audit(1739152474.370:7835): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c00039c1a8 items=0 ppid=60692 pid=60707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.370:7835): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363137653438613530616165653239313338346663643534
type=BPF msg=audit(1739152474.370:7836): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152474.370:7837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152474.370:7838): prog-id=268 op=LOAD
type=SYSCALL msg=audit(1739152474.370:7838): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c00039c238 items=0 ppid=60692 pid=60707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152474.370:7838): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363137653438613530616165653239313338346663643534
type=BPF msg=audit(1739152474.649:7839): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152474.649:7840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152478.760:7841): prog-id=269 op=LOAD
type=SYSCALL msg=audit(1739152478.760:7841): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001f9a50 items=0 ppid=61462 pid=61471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152478.760:7841): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376239356238393063666333356633356333353166313136
type=BPF msg=audit(1739152478.760:7842): prog-id=270 op=LOAD
type=SYSCALL msg=audit(1739152478.760:7842): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001f9a98 items=0 ppid=61462 pid=61471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152478.760:7842): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376239356238393063666333356633356333353166313136
type=BPF msg=audit(1739152478.760:7843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152478.760:7844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152478.760:7845): prog-id=271 op=LOAD
type=SYSCALL msg=audit(1739152478.760:7845): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001f9b28 items=0 ppid=61462 pid=61471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152478.760:7845): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376239356238393063666333356633356333353166313136
type=BPF msg=audit(1739152479.075:7846): prog-id=272 op=LOAD
type=BPF msg=audit(1739152479.076:7847): prog-id=273 op=LOAD
type=SYSCALL msg=audit(1739152479.076:7847): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212a90 items=0 ppid=61652 pid=61662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152479.076:7847): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326665613863336363663736323562306161306130373461
type=BPF msg=audit(1739152479.076:7848): prog-id=274 op=LOAD
type=SYSCALL msg=audit(1739152479.076:7848): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000212ad8 items=0 ppid=61652 pid=61662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152479.076:7848): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326665613863336363663736323562306161306130373461
type=BPF msg=audit(1739152479.076:7849): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152479.076:7850): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152479.076:7851): prog-id=275 op=LOAD
type=SYSCALL msg=audit(1739152479.076:7851): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000212f38 items=0 ppid=61652 pid=61662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152479.076:7851): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32326665613863336363663736323562306161306130373461
type=BPF msg=audit(1739152487.341:7852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152488.522:7853): prog-id=276 op=LOAD
type=BPF msg=audit(1739152488.523:7854): prog-id=277 op=LOAD
type=SYSCALL msg=audit(1739152488.523:7854): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000372590 items=0 ppid=61808 pid=61817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152488.523:7854): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633365653430633739373137633433326237633263373333
type=BPF msg=audit(1739152488.523:7855): prog-id=278 op=LOAD
type=SYSCALL msg=audit(1739152488.523:7855): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0003725d8 items=0 ppid=61808 pid=61817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152488.523:7855): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633365653430633739373137633433326237633263373333
type=BPF msg=audit(1739152488.523:7856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152488.523:7857): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152488.523:7858): prog-id=279 op=LOAD
type=SYSCALL msg=audit(1739152488.523:7858): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000372a38 items=0 ppid=61808 pid=61817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152488.523:7858): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633365653430633739373137633433326237633263373333
type=BPF msg=audit(1739152489.009:7859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152489.020:7860): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152493.617:7861): table=nat:926 family=10 entries=14 op=nft_register_rule pid=62032 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152493.617:7861): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe8eff2530 a2=0 a3=7ffe8eff251c items=0 ppid=33621 pid=62032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152493.617:7861): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152493.617:7862): table=filter:927 family=10 entries=20 op=nft_register_rule pid=62032 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152493.617:7862): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8eff2530 a2=0 a3=7ffe8eff251c items=0 ppid=33621 pid=62032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152493.617:7862): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152493.633:7863): table=nat:928 family=2 entries=18 op=nft_register_rule pid=62041 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152493.633:7863): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe0d122350 a2=0 a3=7ffe0d12233c items=0 ppid=33621 pid=62041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152493.633:7863): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152493.634:7864): table=filter:929 family=2 entries=20 op=nft_register_rule pid=62041 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152493.634:7864): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe0d122350 a2=0 a3=7ffe0d12233c items=0 ppid=33621 pid=62041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152493.634:7864): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152498.665:7865): prog-id=280 op=LOAD
type=SYSCALL msg=audit(1739152498.665:7865): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001979d8 a2=78 a3=c000398910 items=0 ppid=62131 pid=62142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.665:7865): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35346133333463323739663665663935613637353336313064
type=BPF msg=audit(1739152498.665:7866): prog-id=281 op=LOAD
type=SYSCALL msg=audit(1739152498.665:7866): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197770 a2=78 a3=c000398958 items=0 ppid=62131 pid=62142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.665:7866): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35346133333463323739663665663935613637353336313064
type=BPF msg=audit(1739152498.665:7867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152498.665:7868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152498.665:7869): prog-id=282 op=LOAD
type=SYSCALL msg=audit(1739152498.665:7869): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000197c30 a2=78 a3=c0003989e8 items=0 ppid=62131 pid=62142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.665:7869): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35346133333463323739663665663935613637353336313064
type=BPF msg=audit(1739152498.779:7870): prog-id=283 op=LOAD
type=SYSCALL msg=audit(1739152498.779:7870): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c000273ee8 items=0 ppid=62227 pid=62240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.779:7870): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363363393666343564623365393236306330363930326664
type=BPF msg=audit(1739152498.779:7871): prog-id=284 op=LOAD
type=SYSCALL msg=audit(1739152498.779:7871): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000273f38 items=0 ppid=62227 pid=62240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.779:7871): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363363393666343564623365393236306330363930326664
type=BPF msg=audit(1739152498.779:7872): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152498.779:7873): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152498.779:7874): prog-id=285 op=LOAD
type=SYSCALL msg=audit(1739152498.779:7874): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c000273fc8 items=0 ppid=62227 pid=62240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152498.779:7874): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37363363393666343564623365393236306330363930326664
type=BPF msg=audit(1739152499.015:7875): prog-id=286 op=LOAD
type=SYSCALL msg=audit(1739152499.015:7875): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00014b9d8 a2=78 a3=c0001d6ef0 items=0 ppid=62290 pid=62301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.015:7875): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333639353061363833383364336262363466323761316564
type=BPF msg=audit(1739152499.015:7876): prog-id=287 op=LOAD
type=SYSCALL msg=audit(1739152499.015:7876): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b770 a2=78 a3=c0001d6f38 items=0 ppid=62290 pid=62301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.015:7876): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333639353061363833383364336262363466323761316564
type=BPF msg=audit(1739152499.015:7877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.015:7878): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.015:7879): prog-id=288 op=LOAD
type=SYSCALL msg=audit(1739152499.015:7879): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00014bc30 a2=78 a3=c0001d6fc8 items=0 ppid=62290 pid=62301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.015:7879): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333639353061363833383364336262363466323761316564
type=BPF msg=audit(1739152499.082:7880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.111:7881): prog-id=289 op=LOAD
type=BPF msg=audit(1739152499.112:7882): prog-id=290 op=LOAD
type=SYSCALL msg=audit(1739152499.112:7882): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0003cac30 items=0 ppid=62365 pid=62374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.112:7882): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663765313339356237653662363133626333653565376239
type=BPF msg=audit(1739152499.112:7883): prog-id=291 op=LOAD
type=SYSCALL msg=audit(1739152499.112:7883): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0003cac78 items=0 ppid=62365 pid=62374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.112:7883): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663765313339356237653662363133626333653565376239
type=BPF msg=audit(1739152499.112:7884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.112:7885): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.113:7886): prog-id=292 op=LOAD
type=SYSCALL msg=audit(1739152499.113:7886): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003cb0d8 items=0 ppid=62365 pid=62374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.113:7886): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663765313339356237653662363133626333653565376239
type=BPF msg=audit(1739152499.231:7887): prog-id=293 op=LOAD
type=BPF msg=audit(1739152499.232:7888): prog-id=294 op=LOAD
type=SYSCALL msg=audit(1739152499.232:7888): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000298b60 items=0 ppid=62421 pid=62430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.232:7888): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32323465633039346432336266333836616661646261363031
type=BPF msg=audit(1739152499.232:7889): prog-id=295 op=LOAD
type=SYSCALL msg=audit(1739152499.232:7889): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000298ba8 items=0 ppid=62421 pid=62430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.232:7889): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32323465633039346432336266333836616661646261363031
type=BPF msg=audit(1739152499.232:7890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.232:7891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.232:7892): prog-id=296 op=LOAD
type=SYSCALL msg=audit(1739152499.232:7892): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000299008 items=0 ppid=62421 pid=62430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.232:7892): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32323465633039346432336266333836616661646261363031
type=BPF msg=audit(1739152499.308:7893): prog-id=297 op=LOAD
type=SYSCALL msg=audit(1739152499.308:7893): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001439d8 a2=78 a3=c0003cc0a0 items=0 ppid=62459 pid=62471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.308:7893): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366262323735653238316337383939656131653431616330
type=BPF msg=audit(1739152499.308:7894): prog-id=298 op=LOAD
type=SYSCALL msg=audit(1739152499.308:7894): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143770 a2=78 a3=c0003cc0e8 items=0 ppid=62459 pid=62471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.308:7894): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366262323735653238316337383939656131653431616330
type=BPF msg=audit(1739152499.308:7895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.308:7896): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.308:7897): prog-id=299 op=LOAD
type=SYSCALL msg=audit(1739152499.308:7897): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000143c30 a2=78 a3=c0003cc178 items=0 ppid=62459 pid=62471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.308:7897): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366262323735653238316337383939656131653431616330
type=BPF msg=audit(1739152499.333:7898): prog-id=300 op=LOAD
type=SYSCALL msg=audit(1739152499.333:7898): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014b9d8 a2=78 a3=c0002e4270 items=0 ppid=62485 pid=62497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.333:7898): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333936386536336264653130666231613835303338363533
type=BPF msg=audit(1739152499.334:7899): prog-id=301 op=LOAD
type=SYSCALL msg=audit(1739152499.334:7899): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014b770 a2=78 a3=c0002e42b8 items=0 ppid=62485 pid=62497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.334:7899): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333936386536336264653130666231613835303338363533
type=BPF msg=audit(1739152499.334:7900): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.334:7901): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.334:7902): prog-id=302 op=LOAD
type=SYSCALL msg=audit(1739152499.334:7902): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014bc30 a2=78 a3=c0002e4348 items=0 ppid=62485 pid=62497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.334:7902): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35333936386536336264653130666231613835303338363533
type=BPF msg=audit(1739152499.375:7903): prog-id=303 op=LOAD
type=SYSCALL msg=audit(1739152499.375:7903): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0003a8620 items=0 ppid=62534 pid=62543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.375:7903): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663263636330323634363663613135623839333366353261
type=BPF msg=audit(1739152499.375:7904): prog-id=304 op=LOAD
type=SYSCALL msg=audit(1739152499.375:7904): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0003a8668 items=0 ppid=62534 pid=62543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.375:7904): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663263636330323634363663613135623839333366353261
type=BPF msg=audit(1739152499.375:7905): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.375:7906): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.375:7907): prog-id=305 op=LOAD
type=SYSCALL msg=audit(1739152499.375:7907): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0003a86f8 items=0 ppid=62534 pid=62543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.375:7907): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663263636330323634363663613135623839333366353261
type=BPF msg=audit(1739152499.406:7908): prog-id=306 op=LOAD
type=SYSCALL msg=audit(1739152499.406:7908): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c39d8 a2=78 a3=c000024210 items=0 ppid=62586 pid=62602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.406:7908): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35646166636335353232323237356264353537653164383064
type=BPF msg=audit(1739152499.406:7909): prog-id=307 op=LOAD
type=SYSCALL msg=audit(1739152499.406:7909): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c3770 a2=78 a3=c000024258 items=0 ppid=62586 pid=62602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.406:7909): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35646166636335353232323237356264353537653164383064
type=BPF msg=audit(1739152499.406:7910): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.406:7911): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.406:7912): prog-id=308 op=LOAD
type=SYSCALL msg=audit(1739152499.406:7912): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c3c30 a2=78 a3=c0000242e8 items=0 ppid=62586 pid=62602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.406:7912): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35646166636335353232323237356264353537653164383064
type=BPF msg=audit(1739152499.529:7913): prog-id=309 op=LOAD
type=BPF msg=audit(1739152499.530:7914): prog-id=310 op=LOAD
type=SYSCALL msg=audit(1739152499.530:7914): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001a64d0 items=0 ppid=62828 pid=62848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.530:7914): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623861376134316362333564666235613534353366613261
type=BPF msg=audit(1739152499.530:7915): prog-id=311 op=LOAD
type=SYSCALL msg=audit(1739152499.530:7915): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001a6518 items=0 ppid=62828 pid=62848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.530:7915): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623861376134316362333564666235613534353366613261
type=BPF msg=audit(1739152499.530:7916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.530:7917): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.530:7918): prog-id=312 op=LOAD
type=SYSCALL msg=audit(1739152499.530:7918): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001a6978 items=0 ppid=62828 pid=62848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.530:7918): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623861376134316362333564666235613534353366613261
type=BPF msg=audit(1739152499.583:7919): prog-id=313 op=LOAD
type=BPF msg=audit(1739152499.583:7920): prog-id=314 op=LOAD
type=SYSCALL msg=audit(1739152499.583:7920): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028a380 items=0 ppid=62919 pid=62960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.583:7920): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623034613461303039623435323066663431366362663362
type=BPF msg=audit(1739152499.584:7921): prog-id=315 op=LOAD
type=SYSCALL msg=audit(1739152499.584:7921): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028a3c8 items=0 ppid=62919 pid=62960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.584:7921): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623034613461303039623435323066663431366362663362
type=BPF msg=audit(1739152499.584:7922): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.584:7923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.584:7924): prog-id=316 op=LOAD
type=SYSCALL msg=audit(1739152499.584:7924): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00028a828 items=0 ppid=62919 pid=62960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.584:7924): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623034613461303039623435323066663431366362663362
type=BPF msg=audit(1739152499.633:7925): prog-id=317 op=LOAD
type=BPF msg=audit(1739152499.634:7926): prog-id=318 op=LOAD
type=SYSCALL msg=audit(1739152499.634:7926): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023b9d8 a2=78 a3=c00011a390 items=0 ppid=63026 pid=63054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.634:7926): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343738613339393561396566333436363931653939346433
type=BPF msg=audit(1739152499.635:7927): prog-id=319 op=LOAD
type=SYSCALL msg=audit(1739152499.635:7927): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023b770 a2=78 a3=c00011a3d8 items=0 ppid=63026 pid=63054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.635:7927): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343738613339393561396566333436363931653939346433
type=BPF msg=audit(1739152499.635:7928): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.635:7929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.635:7930): prog-id=320 op=LOAD
type=SYSCALL msg=audit(1739152499.635:7930): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023bc30 a2=78 a3=c00011a838 items=0 ppid=63026 pid=63054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.635:7930): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343738613339393561396566333436363931653939346433
type=BPF msg=audit(1739152499.719:7931): prog-id=321 op=LOAD
type=SYSCALL msg=audit(1739152499.719:7931): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c39d8 a2=78 a3=c00024ced0 items=0 ppid=63074 pid=63133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.719:7931): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633464396537623236343432633862616166313134343735
type=BPF msg=audit(1739152499.722:7932): prog-id=322 op=LOAD
type=SYSCALL msg=audit(1739152499.722:7932): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c3770 a2=78 a3=c00024cf18 items=0 ppid=63074 pid=63133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.722:7932): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633464396537623236343432633862616166313134343735
type=BPF msg=audit(1739152499.722:7933): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.722:7934): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.722:7935): prog-id=323 op=LOAD
type=SYSCALL msg=audit(1739152499.722:7935): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c3c30 a2=78 a3=c00024cfa8 items=0 ppid=63074 pid=63133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.722:7935): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633464396537623236343432633862616166313134343735
type=BPF msg=audit(1739152499.747:7936): prog-id=324 op=LOAD
type=BPF msg=audit(1739152499.750:7937): prog-id=325 op=LOAD
type=SYSCALL msg=audit(1739152499.750:7937): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c39d8 a2=78 a3=c000294ba0 items=0 ppid=63151 pid=63192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.750:7937): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383538393632646632383936643062306632633739383531
type=BPF msg=audit(1739152499.752:7938): prog-id=326 op=LOAD
type=SYSCALL msg=audit(1739152499.752:7938): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c3770 a2=78 a3=c000294be8 items=0 ppid=63151 pid=63192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.752:7938): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383538393632646632383936643062306632633739383531
type=BPF msg=audit(1739152499.752:7939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.752:7940): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.752:7941): prog-id=327 op=LOAD
type=SYSCALL msg=audit(1739152499.752:7941): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c3c30 a2=78 a3=c000295048 items=0 ppid=63151 pid=63192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.752:7941): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383538393632646632383936643062306632633739383531
type=BPF msg=audit(1739152499.770:7942): prog-id=328 op=LOAD
type=SYSCALL msg=audit(1739152499.770:7942): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c0003b63d0 items=0 ppid=63224 pid=63270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.770:7942): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383132373632323939303231353462396130653034326530
type=BPF msg=audit(1739152499.770:7943): prog-id=329 op=LOAD
type=SYSCALL msg=audit(1739152499.770:7943): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c0003b6418 items=0 ppid=63224 pid=63270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.770:7943): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383132373632323939303231353462396130653034326530
type=BPF msg=audit(1739152499.771:7944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.771:7945): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.771:7946): prog-id=330 op=LOAD
type=SYSCALL msg=audit(1739152499.771:7946): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c0003b64a8 items=0 ppid=63224 pid=63270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.771:7946): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383132373632323939303231353462396130653034326530
type=BPF msg=audit(1739152499.780:7947): prog-id=331 op=LOAD
type=SYSCALL msg=audit(1739152499.780:7947): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001179d8 a2=78 a3=c0003b4060 items=0 ppid=63248 pid=63324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.780:7947): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633930323339613433666336303561326436343764336563
type=BPF msg=audit(1739152499.781:7948): prog-id=332 op=LOAD
type=SYSCALL msg=audit(1739152499.781:7948): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117770 a2=78 a3=c0003b40a8 items=0 ppid=63248 pid=63324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.781:7948): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633930323339613433666336303561326436343764336563
type=BPF msg=audit(1739152499.781:7949): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.781:7950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.781:7951): prog-id=333 op=LOAD
type=SYSCALL msg=audit(1739152499.781:7951): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000117c30 a2=78 a3=c0003b4138 items=0 ppid=63248 pid=63324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.781:7951): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633930323339613433666336303561326436343764336563
type=BPF msg=audit(1739152499.811:7952): prog-id=334 op=LOAD
type=SYSCALL msg=audit(1739152499.811:7952): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002dfc10 items=0 ppid=63308 pid=63409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.811:7952): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613730323937643536633331333039626262653166353030
type=BPF msg=audit(1739152499.815:7953): prog-id=335 op=LOAD
type=BPF msg=audit(1739152499.815:7954): prog-id=336 op=LOAD
type=SYSCALL msg=audit(1739152499.815:7953): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c00026f3a0 items=0 ppid=63281 pid=63310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.815:7953): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643239666630343431666334333133653962613865366636
type=SYSCALL msg=audit(1739152499.815:7954): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002dfc58 items=0 ppid=63308 pid=63409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1739152499.816:7955): prog-id=337 op=LOAD
type=PROCTITLE msg=audit(1739152499.815:7954): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613730323937643536633331333039626262653166353030
type=BPF msg=audit(1739152499.816:7956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.816:7957): prog-id=0 op=UNLOAD
type=SYSCALL msg=audit(1739152499.816:7955): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c00026f3e8 items=0 ppid=63281 pid=63310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1739152499.816:7958): prog-id=338 op=LOAD
type=PROCTITLE msg=audit(1739152499.816:7955): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643239666630343431666334333133653962613865366636
type=BPF msg=audit(1739152499.816:7959): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.816:7960): prog-id=0 op=UNLOAD
type=SYSCALL msg=audit(1739152499.816:7958): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002dfce8 items=0 ppid=63308 pid=63409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1739152499.817:7961): prog-id=339 op=LOAD
type=PROCTITLE msg=audit(1739152499.816:7958): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613730323937643536633331333039626262653166353030
type=SYSCALL msg=audit(1739152499.817:7961): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c00026f478 items=0 ppid=63281 pid=63310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152499.817:7961): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30643239666630343431666334333133653962613865366636
type=BPF msg=audit(1739152499.883:7962): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152499.911:7963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.113:7964): prog-id=340 op=LOAD
type=SYSCALL msg=audit(1739152500.113:7964): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00027a900 items=0 ppid=63949 pid=63966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.113:7964): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63663231616534376634383131636564326430366134363437
type=BPF msg=audit(1739152500.114:7965): prog-id=341 op=LOAD
type=SYSCALL msg=audit(1739152500.114:7965): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00027a948 items=0 ppid=63949 pid=63966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.114:7965): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63663231616534376634383131636564326430366134363437
type=BPF msg=audit(1739152500.114:7966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.114:7967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.114:7968): prog-id=342 op=LOAD
type=SYSCALL msg=audit(1739152500.114:7968): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00027a9d8 items=0 ppid=63949 pid=63966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.114:7968): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63663231616534376634383131636564326430366134363437
type=BPF msg=audit(1739152500.139:7969): prog-id=343 op=LOAD
type=SYSCALL msg=audit(1739152500.139:7969): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c00033def0 items=0 ppid=64017 pid=64047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.139:7969): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343364393364343831306362626362303838343438346236
type=BPF msg=audit(1739152500.139:7970): prog-id=344 op=LOAD
type=SYSCALL msg=audit(1739152500.139:7970): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c00033df38 items=0 ppid=64017 pid=64047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.139:7970): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343364393364343831306362626362303838343438346236
type=BPF msg=audit(1739152500.140:7971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.140:7972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.140:7973): prog-id=345 op=LOAD
type=SYSCALL msg=audit(1739152500.140:7973): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c00033dfc8 items=0 ppid=64017 pid=64047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.140:7973): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343364393364343831306362626362303838343438346236
type=BPF msg=audit(1739152500.183:7974): prog-id=346 op=LOAD
type=SYSCALL msg=audit(1739152500.183:7974): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000292830 items=0 ppid=64077 pid=64105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.183:7974): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373033653132663336633734636162383638303264666637
type=BPF msg=audit(1739152500.183:7975): prog-id=347 op=LOAD
type=SYSCALL msg=audit(1739152500.183:7975): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000292878 items=0 ppid=64077 pid=64105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.183:7975): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373033653132663336633734636162383638303264666637
type=BPF msg=audit(1739152500.184:7976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.184:7977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.184:7978): prog-id=348 op=LOAD
type=SYSCALL msg=audit(1739152500.184:7978): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000292908 items=0 ppid=64077 pid=64105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152500.184:7978): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373033653132663336633734636162383638303264666637
type=BPF msg=audit(1739152500.320:7979): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.385:7980): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.647:7981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.659:7982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152500.673:7983): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152503.957:7984): prog-id=349 op=LOAD
type=BPF msg=audit(1739152503.957:7985): prog-id=350 op=LOAD
type=SYSCALL msg=audit(1739152503.957:7985): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0003743c0 items=0 ppid=65412 pid=65421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152503.957:7985): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32623932646564636362333034373634373530616539313739
type=BPF msg=audit(1739152503.957:7986): prog-id=351 op=LOAD
type=SYSCALL msg=audit(1739152503.957:7986): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000374408 items=0 ppid=65412 pid=65421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152503.957:7986): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32623932646564636362333034373634373530616539313739
type=BPF msg=audit(1739152503.957:7987): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152503.957:7988): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152503.957:7989): prog-id=352 op=LOAD
type=SYSCALL msg=audit(1739152503.957:7989): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000374868 items=0 ppid=65412 pid=65421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152503.957:7989): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32623932646564636362333034373634373530616539313739
type=BPF msg=audit(1739152504.503:7990): prog-id=353 op=LOAD
type=BPF msg=audit(1739152504.503:7991): prog-id=354 op=LOAD
type=SYSCALL msg=audit(1739152504.503:7991): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014b9d8 a2=78 a3=c0001f3500 items=0 ppid=65545 pid=65555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152504.503:7991): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376464323231323061353861383461653831643130326539
type=BPF msg=audit(1739152504.503:7992): prog-id=355 op=LOAD
type=SYSCALL msg=audit(1739152504.503:7992): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014b770 a2=78 a3=c0001f3548 items=0 ppid=65545 pid=65555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152504.503:7992): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376464323231323061353861383461653831643130326539
type=BPF msg=audit(1739152504.503:7993): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152504.503:7994): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152504.503:7995): prog-id=356 op=LOAD
type=SYSCALL msg=audit(1739152504.503:7995): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014bc30 a2=78 a3=c0001f39a8 items=0 ppid=65545 pid=65555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152504.503:7995): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376464323231323061353861383461653831643130326539
type=BPF msg=audit(1739152506.408:7996): prog-id=357 op=LOAD
type=BPF msg=audit(1739152506.408:7997): prog-id=358 op=LOAD
type=SYSCALL msg=audit(1739152506.408:7997): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c0001ed430 items=0 ppid=65696 pid=65706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152506.408:7997): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646461353037376131393935333036626564323066323265
type=BPF msg=audit(1739152506.409:7998): prog-id=359 op=LOAD
type=SYSCALL msg=audit(1739152506.409:7998): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c0001ed478 items=0 ppid=65696 pid=65706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152506.409:7998): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646461353037376131393935333036626564323066323265
type=BPF msg=audit(1739152506.409:7999): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152506.409:8000): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152506.409:8001): prog-id=360 op=LOAD
type=SYSCALL msg=audit(1739152506.409:8001): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c0001ed8d8 items=0 ppid=65696 pid=65706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152506.409:8001): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646461353037376131393935333036626564323066323265
type=BPF msg=audit(1739152512.793:8002): prog-id=361 op=LOAD
type=BPF msg=audit(1739152512.794:8003): prog-id=362 op=LOAD
type=SYSCALL msg=audit(1739152512.794:8003): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002809d0 items=0 ppid=66315 pid=66324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.794:8003): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396661623638353361613332313336636530636333353463
type=BPF msg=audit(1739152512.794:8004): prog-id=363 op=LOAD
type=SYSCALL msg=audit(1739152512.794:8004): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000280a18 items=0 ppid=66315 pid=66324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.794:8004): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396661623638353361613332313336636530636333353463
type=BPF msg=audit(1739152512.794:8005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152512.794:8006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152512.794:8007): prog-id=364 op=LOAD
type=SYSCALL msg=audit(1739152512.794:8007): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000280e78 items=0 ppid=66315 pid=66324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.794:8007): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396661623638353361613332313336636530636333353463
type=BPF msg=audit(1739152512.975:8008): prog-id=365 op=LOAD
type=BPF msg=audit(1739152512.976:8009): prog-id=366 op=LOAD
type=SYSCALL msg=audit(1739152512.976:8009): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bb9d8 a2=78 a3=c0002a6a00 items=0 ppid=66452 pid=66464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.976:8009): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61646238356630373066663839643763333636363630656434
type=BPF msg=audit(1739152512.976:8010): prog-id=367 op=LOAD
type=SYSCALL msg=audit(1739152512.976:8010): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bb770 a2=78 a3=c0002a6a48 items=0 ppid=66452 pid=66464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.976:8010): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61646238356630373066663839643763333636363630656434
type=BPF msg=audit(1739152512.976:8011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152512.976:8012): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152512.976:8013): prog-id=368 op=LOAD
type=SYSCALL msg=audit(1739152512.976:8013): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bbc30 a2=78 a3=c0002a6ea8 items=0 ppid=66452 pid=66464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152512.976:8013): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61646238356630373066663839643763333636363630656434
type=BPF msg=audit(1739152518.543:8014): prog-id=369 op=LOAD
type=BPF msg=audit(1739152518.543:8015): prog-id=370 op=LOAD
type=SYSCALL msg=audit(1739152518.543:8015): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c0001f54a0 items=0 ppid=67103 pid=67114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152518.543:8015): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333133363561316637306232383738306331623933316235
type=BPF msg=audit(1739152518.544:8016): prog-id=371 op=LOAD
type=SYSCALL msg=audit(1739152518.544:8016): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0001f54e8 items=0 ppid=67103 pid=67114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152518.544:8016): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333133363561316637306232383738306331623933316235
type=BPF msg=audit(1739152518.544:8017): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152518.544:8018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152518.544:8019): prog-id=372 op=LOAD
type=SYSCALL msg=audit(1739152518.544:8019): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c0001f5948 items=0 ppid=67103 pid=67114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152518.544:8019): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333133363561316637306232383738306331623933316235
type=NETFILTER_CFG msg=audit(1739152523.738:8020): table=nat:930 family=10 entries=14 op=nft_register_rule pid=67829 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152523.738:8020): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcb21d0bc0 a2=0 a3=7ffcb21d0bac items=0 ppid=33621 pid=67829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152523.738:8020): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152523.739:8021): table=filter:931 family=10 entries=20 op=nft_register_rule pid=67829 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152523.739:8021): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb21d0bc0 a2=0 a3=7ffcb21d0bac items=0 ppid=33621 pid=67829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152523.739:8021): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152523.748:8022): table=nat:932 family=2 entries=18 op=nft_register_rule pid=67834 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152523.748:8022): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc7e4cb400 a2=0 a3=7ffc7e4cb3ec items=0 ppid=33621 pid=67834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152523.748:8022): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152523.749:8023): table=filter:933 family=2 entries=20 op=nft_register_rule pid=67834 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152523.749:8023): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc7e4cb400 a2=0 a3=7ffc7e4cb3ec items=0 ppid=33621 pid=67834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152523.749:8023): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152526.738:8024): prog-id=373 op=LOAD
type=BPF msg=audit(1739152526.739:8025): prog-id=374 op=LOAD
type=SYSCALL msg=audit(1739152526.739:8025): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014b9d8 a2=78 a3=c000390c60 items=0 ppid=68066 pid=68076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152526.739:8025): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383662353166326466633434386136666664616266336136
type=BPF msg=audit(1739152526.739:8026): prog-id=375 op=LOAD
type=SYSCALL msg=audit(1739152526.739:8026): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014b770 a2=78 a3=c000390ca8 items=0 ppid=68066 pid=68076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152526.739:8026): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383662353166326466633434386136666664616266336136
type=BPF msg=audit(1739152526.739:8027): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152526.739:8028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152526.739:8029): prog-id=376 op=LOAD
type=SYSCALL msg=audit(1739152526.739:8029): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014bc30 a2=78 a3=c000391108 items=0 ppid=68066 pid=68076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152526.739:8029): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383662353166326466633434386136666664616266336136
type=BPF msg=audit(1739152527.755:8030): prog-id=377 op=LOAD
type=BPF msg=audit(1739152527.755:8031): prog-id=378 op=LOAD
type=SYSCALL msg=audit(1739152527.755:8031): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c00038c3c0 items=0 ppid=68288 pid=68298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.755:8031): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63356531646331366638373131643262363434306261653163
type=BPF msg=audit(1739152527.755:8032): prog-id=379 op=LOAD
type=SYSCALL msg=audit(1739152527.755:8032): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c00038c408 items=0 ppid=68288 pid=68298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.755:8032): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63356531646331366638373131643262363434306261653163
type=BPF msg=audit(1739152527.755:8033): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152527.755:8034): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152527.755:8035): prog-id=380 op=LOAD
type=SYSCALL msg=audit(1739152527.755:8035): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c00038c868 items=0 ppid=68288 pid=68298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.755:8035): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63356531646331366638373131643262363434306261653163
type=BPF msg=audit(1739152527.797:8036): prog-id=381 op=LOAD
type=SYSCALL msg=audit(1739152527.797:8036): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001c59d8 a2=78 a3=c00031a9b0 items=0 ppid=68322 pid=68332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.797:8036): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36666364656336623263396539656331316332613465656133
type=BPF msg=audit(1739152527.797:8037): prog-id=382 op=LOAD
type=SYSCALL msg=audit(1739152527.797:8037): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5770 a2=78 a3=c00031a9f8 items=0 ppid=68322 pid=68332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.797:8037): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36666364656336623263396539656331316332613465656133
type=BPF msg=audit(1739152527.797:8038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152527.797:8039): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152527.797:8040): prog-id=383 op=LOAD
type=SYSCALL msg=audit(1739152527.797:8040): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001c5c30 a2=78 a3=c00031aa88 items=0 ppid=68322 pid=68332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152527.797:8040): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36666364656336623263396539656331316332613465656133
type=BPF msg=audit(1739152529.600:8041): prog-id=384 op=LOAD
type=SYSCALL msg=audit(1739152529.600:8041): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000284df0 items=0 ppid=68701 pid=68711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152529.600:8041): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39343261313839383236636366366132633730376238643535
type=BPF msg=audit(1739152529.600:8042): prog-id=385 op=LOAD
type=SYSCALL msg=audit(1739152529.600:8042): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000284e38 items=0 ppid=68701 pid=68711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152529.600:8042): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39343261313839383236636366366132633730376238643535
type=BPF msg=audit(1739152529.600:8043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152529.600:8044): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152529.600:8045): prog-id=386 op=LOAD
type=SYSCALL msg=audit(1739152529.600:8045): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000284ec8 items=0 ppid=68701 pid=68711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152529.600:8045): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39343261313839383236636366366132633730376238643535
type=BPF msg=audit(1739152533.709:8046): prog-id=387 op=LOAD
type=SYSCALL msg=audit(1739152533.709:8046): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002dfec0 items=0 ppid=68879 pid=68888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152533.709:8046): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62373662306236653462306438323562666166353161356130
type=BPF msg=audit(1739152533.709:8047): prog-id=388 op=LOAD
type=SYSCALL msg=audit(1739152533.709:8047): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002dff08 items=0 ppid=68879 pid=68888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152533.709:8047): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62373662306236653462306438323562666166353161356130
type=BPF msg=audit(1739152533.709:8048): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152533.709:8049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152533.709:8050): prog-id=389 op=LOAD
type=SYSCALL msg=audit(1739152533.709:8050): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002dff98 items=0 ppid=68879 pid=68888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152533.709:8050): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62373662306236653462306438323562666166353161356130
type=BPF msg=audit(1739152534.688:8051): prog-id=390 op=LOAD
type=BPF msg=audit(1739152534.688:8052): prog-id=391 op=LOAD
type=SYSCALL msg=audit(1739152534.688:8052): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c0002a9da0 items=0 ppid=69331 pid=69347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152534.688:8052): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616538363834633361633361653539633232323133646261
type=BPF msg=audit(1739152534.688:8053): prog-id=392 op=LOAD
type=SYSCALL msg=audit(1739152534.688:8053): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0002a9de8 items=0 ppid=69331 pid=69347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152534.688:8053): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616538363834633361633361653539633232323133646261
type=BPF msg=audit(1739152534.688:8054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152534.688:8055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152534.688:8056): prog-id=393 op=LOAD
type=SYSCALL msg=audit(1739152534.688:8056): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000426248 items=0 ppid=69331 pid=69347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152534.688:8056): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616538363834633361633361653539633232323133646261
type=BPF msg=audit(1739152543.476:8057): prog-id=394 op=LOAD
type=BPF msg=audit(1739152543.477:8058): prog-id=395 op=LOAD
type=SYSCALL msg=audit(1739152543.477:8058): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001b99d8 a2=78 a3=c000374590 items=0 ppid=69718 pid=69727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.477:8058): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653963643830343433653030306335323038616138303539
type=BPF msg=audit(1739152543.477:8059): prog-id=396 op=LOAD
type=SYSCALL msg=audit(1739152543.477:8059): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001b9770 a2=78 a3=c0003745d8 items=0 ppid=69718 pid=69727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.477:8059): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653963643830343433653030306335323038616138303539
type=BPF msg=audit(1739152543.478:8060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.478:8061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.478:8062): prog-id=397 op=LOAD
type=SYSCALL msg=audit(1739152543.478:8062): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001b9c30 a2=78 a3=c000374a38 items=0 ppid=69718 pid=69727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.478:8062): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653963643830343433653030306335323038616138303539
type=BPF msg=audit(1739152543.664:8063): prog-id=398 op=LOAD
type=BPF msg=audit(1739152543.665:8064): prog-id=399 op=LOAD
type=SYSCALL msg=audit(1739152543.665:8064): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025b50 items=0 ppid=69842 pid=69857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.665:8064): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323935316234623361336532353930306538623336633430
type=BPF msg=audit(1739152543.665:8065): prog-id=400 op=LOAD
type=SYSCALL msg=audit(1739152543.665:8065): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025b98 items=0 ppid=69842 pid=69857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.665:8065): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323935316234623361336532353930306538623336633430
type=BPF msg=audit(1739152543.665:8066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.666:8067): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.666:8068): prog-id=401 op=LOAD
type=SYSCALL msg=audit(1739152543.666:8068): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025ff8 items=0 ppid=69842 pid=69857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.666:8068): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64323935316234623361336532353930306538623336633430
type=BPF msg=audit(1739152543.742:8069): prog-id=402 op=LOAD
type=BPF msg=audit(1739152543.743:8070): prog-id=403 op=LOAD
type=SYSCALL msg=audit(1739152543.743:8070): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c000301220 items=0 ppid=69954 pid=69971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.743:8070): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34396562343666356139323163313338373634653030366239
type=BPF msg=audit(1739152543.743:8071): prog-id=404 op=LOAD
type=SYSCALL msg=audit(1739152543.743:8071): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c000301268 items=0 ppid=69954 pid=69971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.743:8071): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34396562343666356139323163313338373634653030366239
type=BPF msg=audit(1739152543.743:8072): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.743:8073): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.743:8074): prog-id=405 op=LOAD
type=SYSCALL msg=audit(1739152543.743:8074): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c0003016c8 items=0 ppid=69954 pid=69971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.743:8074): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34396562343666356139323163313338373634653030366239
type=BPF msg=audit(1739152543.968:8075): prog-id=406 op=LOAD
type=BPF msg=audit(1739152543.969:8076): prog-id=407 op=LOAD
type=SYSCALL msg=audit(1739152543.969:8076): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001ea8b0 items=0 ppid=70200 pid=70209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.969:8076): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38636339373261353831373235393332306430383439353436
type=BPF msg=audit(1739152543.969:8077): prog-id=408 op=LOAD
type=SYSCALL msg=audit(1739152543.969:8077): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001ea8f8 items=0 ppid=70200 pid=70209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.969:8077): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38636339373261353831373235393332306430383439353436
type=BPF msg=audit(1739152543.969:8078): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.969:8079): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152543.969:8080): prog-id=409 op=LOAD
type=SYSCALL msg=audit(1739152543.969:8080): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001ead58 items=0 ppid=70200 pid=70209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152543.969:8080): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38636339373261353831373235393332306430383439353436
type=BPF msg=audit(1739152544.468:8081): prog-id=410 op=LOAD
type=SYSCALL msg=audit(1739152544.468:8081): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c00022c800 items=0 ppid=70398 pid=70407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152544.468:8081): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39323363373962333434666332363761663934383738366164
type=BPF msg=audit(1739152544.468:8082): prog-id=411 op=LOAD
type=SYSCALL msg=audit(1739152544.468:8082): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c00022c848 items=0 ppid=70398 pid=70407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152544.468:8082): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39323363373962333434666332363761663934383738366164
type=BPF msg=audit(1739152544.468:8083): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152544.468:8084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152544.468:8085): prog-id=412 op=LOAD
type=SYSCALL msg=audit(1739152544.468:8085): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c00022c8d8 items=0 ppid=70398 pid=70407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152544.468:8085): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39323363373962333434666332363761663934383738366164
type=BPF msg=audit(1739152545.049:8086): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152553.861:8087): table=nat:934 family=10 entries=14 op=nft_register_rule pid=71044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152553.861:8087): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc335a2da0 a2=0 a3=7ffc335a2d8c items=0 ppid=33621 pid=71044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152553.861:8087): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152553.862:8088): table=nat:935 family=2 entries=18 op=nft_register_rule pid=71045 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152553.862:8088): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff0d93dde0 a2=0 a3=7fff0d93ddcc items=0 ppid=33621 pid=71045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152553.862:8088): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152553.865:8089): table=filter:936 family=10 entries=20 op=nft_register_rule pid=71044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152553.865:8089): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc335a2da0 a2=0 a3=7ffc335a2d8c items=0 ppid=33621 pid=71044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152553.865:8089): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152553.871:8090): table=filter:937 family=2 entries=20 op=nft_register_rule pid=71045 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152553.871:8090): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff0d93dde0 a2=0 a3=7fff0d93ddcc items=0 ppid=33621 pid=71045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152553.871:8090): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152564.162:8091): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.174:8092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.705:8093): prog-id=413 op=LOAD
type=BPF msg=audit(1739152564.706:8094): prog-id=414 op=LOAD
type=SYSCALL msg=audit(1739152564.706:8094): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c00039cad0 items=0 ppid=71386 pid=71395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.706:8094): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633435653566616165303431626137626662633835323733
type=BPF msg=audit(1739152564.706:8095): prog-id=415 op=LOAD
type=SYSCALL msg=audit(1739152564.706:8095): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c00039cb18 items=0 ppid=71386 pid=71395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.706:8095): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633435653566616165303431626137626662633835323733
type=BPF msg=audit(1739152564.706:8096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.706:8097): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.706:8098): prog-id=416 op=LOAD
type=SYSCALL msg=audit(1739152564.706:8098): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c00039cf78 items=0 ppid=71386 pid=71395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.706:8098): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633435653566616165303431626137626662633835323733
type=BPF msg=audit(1739152564.750:8099): prog-id=417 op=LOAD
type=SYSCALL msg=audit(1739152564.750:8099): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c0002bbbd0 items=0 ppid=71420 pid=71430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.750:8099): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326661323430383837373930623433353039613330666162
type=BPF msg=audit(1739152564.750:8100): prog-id=418 op=LOAD
type=SYSCALL msg=audit(1739152564.750:8100): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c0002bbc18 items=0 ppid=71420 pid=71430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.750:8100): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326661323430383837373930623433353039613330666162
type=BPF msg=audit(1739152564.751:8101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.751:8102): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.751:8103): prog-id=419 op=LOAD
type=SYSCALL msg=audit(1739152564.751:8103): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c0002bbca8 items=0 ppid=71420 pid=71430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.751:8103): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326661323430383837373930623433353039613330666162
type=BPF msg=audit(1739152564.806:8104): prog-id=420 op=LOAD
type=SYSCALL msg=audit(1739152564.806:8104): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001439d8 a2=78 a3=c000025d70 items=0 ppid=71459 pid=71478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.806:8104): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383837656537396634323162616634663936656139633136
type=BPF msg=audit(1739152564.806:8105): prog-id=421 op=LOAD
type=SYSCALL msg=audit(1739152564.806:8105): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143770 a2=78 a3=c000025db8 items=0 ppid=71459 pid=71478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.806:8105): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383837656537396634323162616634663936656139633136
type=BPF msg=audit(1739152564.806:8106): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.806:8107): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.806:8108): prog-id=422 op=LOAD
type=SYSCALL msg=audit(1739152564.806:8108): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000143c30 a2=78 a3=c000025e48 items=0 ppid=71459 pid=71478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.806:8108): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383837656537396634323162616634663936656139633136
type=BPF msg=audit(1739152564.864:8109): prog-id=423 op=LOAD
type=SYSCALL msg=audit(1739152564.864:8109): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000299980 items=0 ppid=71484 pid=71515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.864:8109): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336336333665313165323331636263313635653664613433
type=BPF msg=audit(1739152564.864:8110): prog-id=424 op=LOAD
type=SYSCALL msg=audit(1739152564.864:8110): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002999c8 items=0 ppid=71484 pid=71515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.864:8110): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336336333665313165323331636263313635653664613433
type=BPF msg=audit(1739152564.864:8111): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.864:8112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.864:8113): prog-id=425 op=LOAD
type=SYSCALL msg=audit(1739152564.864:8113): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000299a58 items=0 ppid=71484 pid=71515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.864:8113): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336336333665313165323331636263313635653664613433
type=BPF msg=audit(1739152564.965:8114): prog-id=426 op=LOAD
type=BPF msg=audit(1739152564.966:8115): prog-id=427 op=LOAD
type=SYSCALL msg=audit(1739152564.966:8115): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0003b80b0 items=0 ppid=71608 pid=71629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.966:8115): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376234383763643132386336363066623535626533663466
type=BPF msg=audit(1739152564.966:8116): prog-id=428 op=LOAD
type=SYSCALL msg=audit(1739152564.966:8116): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c0003b80f8 items=0 ppid=71608 pid=71629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.966:8116): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376234383763643132386336363066623535626533663466
type=BPF msg=audit(1739152564.966:8117): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.966:8118): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152564.966:8119): prog-id=429 op=LOAD
type=SYSCALL msg=audit(1739152564.966:8119): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c0003b8558 items=0 ppid=71608 pid=71629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152564.966:8119): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376234383763643132386336363066623535626533663466
type=BPF msg=audit(1739152565.287:8120): prog-id=430 op=LOAD
type=SYSCALL msg=audit(1739152565.287:8120): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001439d8 a2=78 a3=c0002195b0 items=0 ppid=71791 pid=71810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.287:8120): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633135323735326538663465396165623631653831643337
type=BPF msg=audit(1739152565.287:8121): prog-id=431 op=LOAD
type=SYSCALL msg=audit(1739152565.287:8121): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143770 a2=78 a3=c0002195f8 items=0 ppid=71791 pid=71810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.287:8121): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633135323735326538663465396165623631653831643337
type=BPF msg=audit(1739152565.287:8122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.288:8123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.288:8124): prog-id=432 op=LOAD
type=SYSCALL msg=audit(1739152565.288:8124): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000143c30 a2=78 a3=c000219688 items=0 ppid=71791 pid=71810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.288:8124): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633135323735326538663465396165623631653831643337
type=BPF msg=audit(1739152565.368:8125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.511:8126): prog-id=433 op=LOAD
type=BPF msg=audit(1739152565.511:8127): prog-id=434 op=LOAD
type=SYSCALL msg=audit(1739152565.511:8127): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00037ab70 items=0 ppid=72086 pid=72107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.511:8127): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663639373339393061373334336437383834326537306438
type=BPF msg=audit(1739152565.511:8128): prog-id=435 op=LOAD
type=SYSCALL msg=audit(1739152565.511:8128): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00037abb8 items=0 ppid=72086 pid=72107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.511:8128): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663639373339393061373334336437383834326537306438
type=BPF msg=audit(1739152565.511:8129): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.512:8130): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.512:8131): prog-id=436 op=LOAD
type=SYSCALL msg=audit(1739152565.512:8131): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00037b018 items=0 ppid=72086 pid=72107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.512:8131): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663639373339393061373334336437383834326537306438
type=BPF msg=audit(1739152565.555:8132): prog-id=437 op=LOAD
type=SYSCALL msg=audit(1739152565.555:8132): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000361eb0 items=0 ppid=72179 pid=72188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.555:8132): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643037306636373633323463303538623966313964343861
type=BPF msg=audit(1739152565.555:8133): prog-id=438 op=LOAD
type=SYSCALL msg=audit(1739152565.555:8133): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000361ef8 items=0 ppid=72179 pid=72188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.555:8133): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643037306636373633323463303538623966313964343861
type=BPF msg=audit(1739152565.556:8134): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.556:8135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152565.556:8136): prog-id=439 op=LOAD
type=SYSCALL msg=audit(1739152565.556:8136): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000361f88 items=0 ppid=72179 pid=72188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152565.556:8136): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643037306636373633323463303538623966313964343861
type=BPF msg=audit(1739152566.175:8137): prog-id=440 op=LOAD
type=SYSCALL msg=audit(1739152566.175:8137): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00031e530 items=0 ppid=72538 pid=72549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.175:8137): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30663838626535643065366639663337313837333366383761
type=BPF msg=audit(1739152566.175:8138): prog-id=441 op=LOAD
type=SYSCALL msg=audit(1739152566.175:8138): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00031e578 items=0 ppid=72538 pid=72549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.175:8138): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30663838626535643065366639663337313837333366383761
type=BPF msg=audit(1739152566.175:8139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152566.175:8140): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152566.175:8141): prog-id=442 op=LOAD
type=SYSCALL msg=audit(1739152566.175:8141): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00031e608 items=0 ppid=72538 pid=72549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.175:8141): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30663838626535643065366639663337313837333366383761
type=BPF msg=audit(1739152566.523:8142): prog-id=443 op=LOAD
type=SYSCALL msg=audit(1739152566.523:8142): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001f25a0 items=0 ppid=72687 pid=72705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.523:8142): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336139353231333231626339356237366165626563663836
type=BPF msg=audit(1739152566.523:8143): prog-id=444 op=LOAD
type=SYSCALL msg=audit(1739152566.523:8143): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001f25e8 items=0 ppid=72687 pid=72705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.523:8143): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336139353231333231626339356237366165626563663836
type=BPF msg=audit(1739152566.524:8144): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152566.524:8145): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152566.524:8146): prog-id=445 op=LOAD
type=SYSCALL msg=audit(1739152566.524:8146): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001f2678 items=0 ppid=72687 pid=72705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152566.524:8146): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336139353231333231626339356237366165626563663836
type=BPF msg=audit(1739152567.008:8147): prog-id=446 op=LOAD
type=SYSCALL msg=audit(1739152567.008:8147): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c000357eb0 items=0 ppid=72805 pid=72813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152567.008:8147): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37353365313731373833643432353932333330373163363336
type=BPF msg=audit(1739152567.008:8148): prog-id=447 op=LOAD
type=SYSCALL msg=audit(1739152567.008:8148): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c000357ef8 items=0 ppid=72805 pid=72813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152567.008:8148): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37353365313731373833643432353932333330373163363336
type=BPF msg=audit(1739152567.008:8149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152567.008:8150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152567.008:8151): prog-id=448 op=LOAD
type=SYSCALL msg=audit(1739152567.008:8151): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c000357f88 items=0 ppid=72805 pid=72813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152567.008:8151): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37353365313731373833643432353932333330373163363336
type=BPF msg=audit(1739152575.043:8152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152575.084:8153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.528:8154): prog-id=449 op=LOAD
type=BPF msg=audit(1739152577.530:8155): prog-id=450 op=LOAD
type=BPF msg=audit(1739152577.532:8156): prog-id=451 op=LOAD
type=BPF msg=audit(1739152577.533:8157): prog-id=452 op=LOAD
type=BPF msg=audit(1739152577.533:8158): prog-id=453 op=LOAD
type=SYSCALL msg=audit(1739152577.533:8157): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0001dca00 items=0 ppid=73796 pid=73814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.533:8157): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33656261326265383361626336643036333131393865346534
type=SYSCALL msg=audit(1739152577.533:8158): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002fce10 items=0 ppid=73757 pid=73768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1739152577.534:8159): prog-id=454 op=LOAD
type=PROCTITLE msg=audit(1739152577.533:8158): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373732373164346162626633333136643030363139326363
type=BPF msg=audit(1739152577.534:8160): prog-id=455 op=LOAD
type=SYSCALL msg=audit(1739152577.534:8159): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c0001dca48 items=0 ppid=73796 pid=73814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=SYSCALL msg=audit(1739152577.534:8160): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002fce58 items=0 ppid=73757 pid=73768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.534:8159): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33656261326265383361626336643036333131393865346534
type=PROCTITLE msg=audit(1739152577.534:8160): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373732373164346162626633333136643030363139326363
type=BPF msg=audit(1739152577.534:8161): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.534:8162): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.534:8163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.535:8164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.535:8165): prog-id=456 op=LOAD
type=BPF msg=audit(1739152577.535:8166): prog-id=457 op=LOAD
type=SYSCALL msg=audit(1739152577.535:8166): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002fd2b8 items=0 ppid=73757 pid=73768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.535:8166): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373732373164346162626633333136643030363139326363
type=SYSCALL msg=audit(1739152577.535:8165): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c0001dcea8 items=0 ppid=73796 pid=73814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.535:8165): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33656261326265383361626336643036333131393865346534
type=BPF msg=audit(1739152577.538:8167): prog-id=458 op=LOAD
type=SYSCALL msg=audit(1739152577.538:8167): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c00028ab70 items=0 ppid=73813 pid=73829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.538:8167): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62613865383532643332623333303437353563353866393132
type=BPF msg=audit(1739152577.538:8168): prog-id=459 op=LOAD
type=SYSCALL msg=audit(1739152577.538:8168): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c00028abb8 items=0 ppid=73813 pid=73829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.538:8168): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62613865383532643332623333303437353563353866393132
type=BPF msg=audit(1739152577.538:8169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.538:8170): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.538:8171): prog-id=460 op=LOAD
type=SYSCALL msg=audit(1739152577.538:8171): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c00028b018 items=0 ppid=73813 pid=73829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.538:8171): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62613865383532643332623333303437353563353866393132
type=BPF msg=audit(1739152577.863:8172): prog-id=461 op=LOAD
type=BPF msg=audit(1739152577.864:8173): prog-id=462 op=LOAD
type=SYSCALL msg=audit(1739152577.864:8173): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c00039ce60 items=0 ppid=73905 pid=73926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.864:8173): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396639366233326563643530623538643631343664316466
type=BPF msg=audit(1739152577.864:8174): prog-id=463 op=LOAD
type=SYSCALL msg=audit(1739152577.864:8174): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c00039cea8 items=0 ppid=73905 pid=73926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.864:8174): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396639366233326563643530623538643631343664316466
type=BPF msg=audit(1739152577.864:8175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.864:8176): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.864:8177): prog-id=464 op=LOAD
type=SYSCALL msg=audit(1739152577.864:8177): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c00039d308 items=0 ppid=73905 pid=73926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.864:8177): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396639366233326563643530623538643631343664316466
type=BPF msg=audit(1739152577.940:8178): prog-id=465 op=LOAD
type=BPF msg=audit(1739152577.940:8179): prog-id=466 op=LOAD
type=SYSCALL msg=audit(1739152577.940:8179): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0000243c0 items=0 ppid=73979 pid=73990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.940:8179): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323030313838313966623663613262396530343634363631
type=BPF msg=audit(1739152577.941:8180): prog-id=467 op=LOAD
type=SYSCALL msg=audit(1739152577.941:8180): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000024408 items=0 ppid=73979 pid=73990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.941:8180): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323030313838313966623663613262396530343634363631
type=BPF msg=audit(1739152577.941:8181): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.941:8182): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152577.941:8183): prog-id=468 op=LOAD
type=SYSCALL msg=audit(1739152577.941:8183): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000024868 items=0 ppid=73979 pid=73990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152577.941:8183): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323030313838313966623663613262396530343634363631
type=BPF msg=audit(1739152578.141:8184): prog-id=469 op=LOAD
type=BPF msg=audit(1739152578.144:8185): prog-id=470 op=LOAD
type=SYSCALL msg=audit(1739152578.144:8185): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001ddcb0 items=0 ppid=74087 pid=74095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.144:8185): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373138393061336334616133363363653463666339323839
type=BPF msg=audit(1739152578.144:8186): prog-id=471 op=LOAD
type=SYSCALL msg=audit(1739152578.144:8186): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001ddcf8 items=0 ppid=74087 pid=74095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.144:8186): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373138393061336334616133363363653463666339323839
type=BPF msg=audit(1739152578.144:8187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152578.144:8188): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152578.144:8189): prog-id=472 op=LOAD
type=SYSCALL msg=audit(1739152578.144:8189): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00029a158 items=0 ppid=74087 pid=74095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.144:8189): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373138393061336334616133363363653463666339323839
type=BPF msg=audit(1739152578.474:8190): prog-id=473 op=LOAD
type=BPF msg=audit(1739152578.474:8191): prog-id=474 op=LOAD
type=SYSCALL msg=audit(1739152578.474:8191): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002ac380 items=0 ppid=74255 pid=74264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.474:8191): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386138346435383938656537656562353130373963333139
type=BPF msg=audit(1739152578.474:8192): prog-id=475 op=LOAD
type=SYSCALL msg=audit(1739152578.474:8192): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002ac3c8 items=0 ppid=74255 pid=74264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.474:8192): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386138346435383938656537656562353130373963333139
type=BPF msg=audit(1739152578.475:8193): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152578.475:8194): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152578.475:8195): prog-id=476 op=LOAD
type=SYSCALL msg=audit(1739152578.475:8195): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002ac828 items=0 ppid=74255 pid=74264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152578.475:8195): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386138346435383938656537656562353130373963333139
type=NETFILTER_CFG msg=audit(1739152584.173:8196): table=nat:938 family=10 entries=14 op=nft_register_rule pid=74913 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152584.173:8196): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd71bceb20 a2=0 a3=7ffd71bceb0c items=0 ppid=33621 pid=74913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152584.173:8196): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152584.174:8197): table=filter:939 family=10 entries=20 op=nft_register_rule pid=74913 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152584.174:8197): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd71bceb20 a2=0 a3=7ffd71bceb0c items=0 ppid=33621 pid=74913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152584.174:8197): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152584.206:8198): table=nat:940 family=2 entries=18 op=nft_register_rule pid=74919 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152584.206:8198): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe8288d8d0 a2=0 a3=7ffe8288d8bc items=0 ppid=33621 pid=74919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152584.206:8198): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152584.207:8199): table=filter:941 family=2 entries=20 op=nft_register_rule pid=74919 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152584.207:8199): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8288d8d0 a2=0 a3=7ffe8288d8bc items=0 ppid=33621 pid=74919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152584.207:8199): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152592.293:8200): prog-id=477 op=LOAD
type=SYSCALL msg=audit(1739152592.293:8200): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c0003809f0 items=0 ppid=75463 pid=75474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.293:8200): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613764656363336635636464326134613863333764623065
type=BPF msg=audit(1739152592.293:8201): prog-id=478 op=LOAD
type=SYSCALL msg=audit(1739152592.293:8201): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c000380a38 items=0 ppid=75463 pid=75474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.293:8201): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613764656363336635636464326134613863333764623065
type=BPF msg=audit(1739152592.294:8202): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.294:8203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.294:8204): prog-id=479 op=LOAD
type=SYSCALL msg=audit(1739152592.294:8204): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c000380ac8 items=0 ppid=75463 pid=75474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.294:8204): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613764656363336635636464326134613863333764623065
type=BPF msg=audit(1739152592.325:8205): prog-id=480 op=LOAD
type=SYSCALL msg=audit(1739152592.325:8205): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c00026bed0 items=0 ppid=75492 pid=75516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.325:8205): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346462373939356639396136303932613763623763376161
type=BPF msg=audit(1739152592.325:8206): prog-id=481 op=LOAD
type=SYSCALL msg=audit(1739152592.325:8206): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c00026bf18 items=0 ppid=75492 pid=75516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.325:8206): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346462373939356639396136303932613763623763376161
type=BPF msg=audit(1739152592.325:8207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.325:8208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.325:8209): prog-id=482 op=LOAD
type=SYSCALL msg=audit(1739152592.325:8209): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c00026bfa8 items=0 ppid=75492 pid=75516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.325:8209): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30346462373939356639396136303932613763623763376161
type=BPF msg=audit(1739152592.561:8210): prog-id=483 op=LOAD
type=SYSCALL msg=audit(1739152592.561:8210): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c000219260 items=0 ppid=75718 pid=75728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.561:8210): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65626164633564306266313132376164303633383631383663
type=BPF msg=audit(1739152592.561:8211): prog-id=484 op=LOAD
type=SYSCALL msg=audit(1739152592.561:8211): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c0002192a8 items=0 ppid=75718 pid=75728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.561:8211): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65626164633564306266313132376164303633383631383663
type=BPF msg=audit(1739152592.561:8212): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.561:8213): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.561:8214): prog-id=485 op=LOAD
type=SYSCALL msg=audit(1739152592.561:8214): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c000219338 items=0 ppid=75718 pid=75728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152592.561:8214): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65626164633564306266313132376164303633383631383663
type=BPF msg=audit(1739152592.630:8215): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152592.650:8216): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.136:8217): prog-id=486 op=LOAD
type=BPF msg=audit(1739152593.137:8218): prog-id=487 op=LOAD
type=SYSCALL msg=audit(1739152593.137:8218): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ac530 items=0 ppid=75985 pid=75992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.137:8218): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31623062656664343239313762623839386239626539323535
type=BPF msg=audit(1739152593.137:8219): prog-id=488 op=LOAD
type=SYSCALL msg=audit(1739152593.137:8219): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ac578 items=0 ppid=75985 pid=75992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.137:8219): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31623062656664343239313762623839386239626539323535
type=BPF msg=audit(1739152593.137:8220): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.137:8221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.137:8222): prog-id=489 op=LOAD
type=SYSCALL msg=audit(1739152593.137:8222): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ac9d8 items=0 ppid=75985 pid=75992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.137:8222): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31623062656664343239313762623839386239626539323535
type=BPF msg=audit(1739152593.209:8223): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.256:8224): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.854:8225): prog-id=490 op=LOAD
type=BPF msg=audit(1739152593.854:8226): prog-id=491 op=LOAD
type=SYSCALL msg=audit(1739152593.854:8226): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0000255e0 items=0 ppid=76188 pid=76218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.854:8226): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31346336306134333832363861613235303337616431666430
type=BPF msg=audit(1739152593.855:8227): prog-id=492 op=LOAD
type=SYSCALL msg=audit(1739152593.855:8227): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000025628 items=0 ppid=76188 pid=76218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.855:8227): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31346336306134333832363861613235303337616431666430
type=BPF msg=audit(1739152593.855:8228): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.855:8229): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.855:8230): prog-id=493 op=LOAD
type=SYSCALL msg=audit(1739152593.855:8230): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000025a88 items=0 ppid=76188 pid=76218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.855:8230): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31346336306134333832363861613235303337616431666430
type=BPF msg=audit(1739152593.937:8231): prog-id=494 op=LOAD
type=SYSCALL msg=audit(1739152593.937:8231): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c000312490 items=0 ppid=76190 pid=76205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.937:8231): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38613036363138663039393265326462376566616632376364
type=BPF msg=audit(1739152593.937:8232): prog-id=495 op=LOAD
type=SYSCALL msg=audit(1739152593.937:8232): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c0003124d8 items=0 ppid=76190 pid=76205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.937:8232): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38613036363138663039393265326462376566616632376364
type=BPF msg=audit(1739152593.937:8233): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.937:8234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152593.937:8235): prog-id=496 op=LOAD
type=SYSCALL msg=audit(1739152593.937:8235): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c000312568 items=0 ppid=76190 pid=76205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152593.937:8235): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38613036363138663039393265326462376566616632376364
type=BPF msg=audit(1739152594.408:8236): prog-id=497 op=LOAD
type=BPF msg=audit(1739152594.410:8237): prog-id=498 op=LOAD
type=SYSCALL msg=audit(1739152594.410:8237): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003b0380 items=0 ppid=76399 pid=76414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.410:8237): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613164383863373832613331366232303534346439333539
type=BPF msg=audit(1739152594.410:8238): prog-id=499 op=LOAD
type=SYSCALL msg=audit(1739152594.410:8238): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003b03c8 items=0 ppid=76399 pid=76414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.410:8238): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613164383863373832613331366232303534346439333539
type=BPF msg=audit(1739152594.410:8239): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.410:8240): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.411:8241): prog-id=500 op=LOAD
type=SYSCALL msg=audit(1739152594.411:8241): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003b0828 items=0 ppid=76399 pid=76414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.411:8241): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65613164383863373832613331366232303534346439333539
type=BPF msg=audit(1739152594.620:8242): prog-id=501 op=LOAD
type=SYSCALL msg=audit(1739152594.620:8242): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000983c0 items=0 ppid=76496 pid=76515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.620:8242): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63313330373938646534663862366238366661623962343936
type=BPF msg=audit(1739152594.620:8243): prog-id=502 op=LOAD
type=SYSCALL msg=audit(1739152594.620:8243): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000098408 items=0 ppid=76496 pid=76515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.620:8243): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63313330373938646534663862366238366661623962343936
type=BPF msg=audit(1739152594.620:8244): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.620:8245): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.620:8246): prog-id=503 op=LOAD
type=SYSCALL msg=audit(1739152594.620:8246): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000098498 items=0 ppid=76496 pid=76515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.620:8246): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63313330373938646534663862366238366661623962343936
type=BPF msg=audit(1739152594.638:8247): prog-id=504 op=LOAD
type=BPF msg=audit(1739152594.639:8248): prog-id=505 op=LOAD
type=SYSCALL msg=audit(1739152594.639:8248): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002b7fa0 items=0 ppid=76547 pid=76565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.639:8248): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383739353034333131636232626632666132376463336165
type=BPF msg=audit(1739152594.639:8249): prog-id=506 op=LOAD
type=SYSCALL msg=audit(1739152594.639:8249): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002b7fe8 items=0 ppid=76547 pid=76565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.639:8249): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383739353034333131636232626632666132376463336165
type=BPF msg=audit(1739152594.639:8250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.639:8251): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.640:8252): prog-id=507 op=LOAD
type=SYSCALL msg=audit(1739152594.640:8252): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002f2448 items=0 ppid=76547 pid=76565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.640:8252): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63383739353034333131636232626632666132376463336165
type=BPF msg=audit(1739152594.896:8253): prog-id=508 op=LOAD
type=SYSCALL msg=audit(1739152594.896:8253): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001fb800 items=0 ppid=76709 pid=76724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.896:8253): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633439323234626231613237373334653131393964363631
type=BPF msg=audit(1739152594.896:8254): prog-id=509 op=LOAD
type=SYSCALL msg=audit(1739152594.896:8254): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001fb848 items=0 ppid=76709 pid=76724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.896:8254): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633439323234626231613237373334653131393964363631
type=BPF msg=audit(1739152594.896:8255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.896:8256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.896:8257): prog-id=510 op=LOAD
type=SYSCALL msg=audit(1739152594.896:8257): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001fb8d8 items=0 ppid=76709 pid=76724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.896:8257): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633439323234626231613237373334653131393964363631
type=BPF msg=audit(1739152594.910:8258): prog-id=511 op=LOAD
type=BPF msg=audit(1739152594.910:8259): prog-id=512 op=LOAD
type=SYSCALL msg=audit(1739152594.910:8259): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bb9d8 a2=78 a3=c000344380 items=0 ppid=76733 pid=76768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.910:8259): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376336313032323431396138666661393965633039303737
type=BPF msg=audit(1739152594.910:8260): prog-id=513 op=LOAD
type=SYSCALL msg=audit(1739152594.910:8260): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bb770 a2=78 a3=c0003443c8 items=0 ppid=76733 pid=76768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.910:8260): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376336313032323431396138666661393965633039303737
type=BPF msg=audit(1739152594.910:8261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.910:8262): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152594.910:8263): prog-id=514 op=LOAD
type=SYSCALL msg=audit(1739152594.910:8263): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bbc30 a2=78 a3=c000344828 items=0 ppid=76733 pid=76768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152594.910:8263): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376336313032323431396138666661393965633039303737
type=BPF msg=audit(1739152600.570:8264): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152600.599:8265): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152604.005:8266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152604.018:8267): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152605.212:8268): prog-id=515 op=LOAD
type=BPF msg=audit(1739152605.213:8269): prog-id=516 op=LOAD
type=SYSCALL msg=audit(1739152605.213:8269): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bb9d8 a2=78 a3=c0002e16d0 items=0 ppid=77602 pid=77612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152605.213:8269): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373263383038343461366131336262323239343630626633
type=BPF msg=audit(1739152605.213:8270): prog-id=517 op=LOAD
type=SYSCALL msg=audit(1739152605.213:8270): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bb770 a2=78 a3=c0002e1718 items=0 ppid=77602 pid=77612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152605.213:8270): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373263383038343461366131336262323239343630626633
type=BPF msg=audit(1739152605.213:8271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152605.213:8272): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152605.213:8273): prog-id=518 op=LOAD
type=SYSCALL msg=audit(1739152605.213:8273): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bbc30 a2=78 a3=c0002e1b78 items=0 ppid=77602 pid=77612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152605.213:8273): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373263383038343461366131336262323239343630626633
type=NETFILTER_CFG msg=audit(1739152614.301:8274): table=nat:942 family=10 entries=14 op=nft_register_rule pid=77946 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152614.301:8274): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd5769ff00 a2=0 a3=7ffd5769feec items=0 ppid=33621 pid=77946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152614.301:8274): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152614.302:8275): table=filter:943 family=10 entries=20 op=nft_register_rule pid=77946 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152614.302:8275): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd5769ff00 a2=0 a3=7ffd5769feec items=0 ppid=33621 pid=77946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152614.302:8275): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152614.332:8276): table=nat:944 family=2 entries=18 op=nft_register_rule pid=77966 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152614.332:8276): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe74ff4850 a2=0 a3=7ffe74ff483c items=0 ppid=33621 pid=77966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152614.332:8276): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152614.334:8277): table=filter:945 family=2 entries=20 op=nft_register_rule pid=77966 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152614.334:8277): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe74ff4850 a2=0 a3=7ffe74ff483c items=0 ppid=33621 pid=77966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152614.334:8277): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152625.957:8278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152625.970:8279): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152642.110:8280): prog-id=519 op=LOAD
type=SYSCALL msg=audit(1739152642.110:8280): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c0003ba370 items=0 ppid=78562 pid=78570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.110:8280): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653733643366336366666430393831396364616665373439
type=BPF msg=audit(1739152642.110:8281): prog-id=520 op=LOAD
type=SYSCALL msg=audit(1739152642.110:8281): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c0003ba3b8 items=0 ppid=78562 pid=78570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.110:8281): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653733643366336366666430393831396364616665373439
type=BPF msg=audit(1739152642.110:8282): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152642.110:8283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152642.110:8284): prog-id=521 op=LOAD
type=SYSCALL msg=audit(1739152642.110:8284): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c0003ba448 items=0 ppid=78562 pid=78570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.110:8284): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653733643366336366666430393831396364616665373439
type=BPF msg=audit(1739152642.256:8285): prog-id=522 op=LOAD
type=BPF msg=audit(1739152642.257:8286): prog-id=523 op=LOAD
type=SYSCALL msg=audit(1739152642.257:8286): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c000219050 items=0 ppid=78648 pid=78662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.257:8286): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343439396338393637623064346235643239356266633536
type=BPF msg=audit(1739152642.257:8287): prog-id=524 op=LOAD
type=SYSCALL msg=audit(1739152642.257:8287): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000219098 items=0 ppid=78648 pid=78662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.257:8287): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343439396338393637623064346235643239356266633536
type=BPF msg=audit(1739152642.257:8288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152642.257:8289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152642.257:8290): prog-id=525 op=LOAD
type=SYSCALL msg=audit(1739152642.257:8290): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c0002194f8 items=0 ppid=78648 pid=78662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152642.257:8290): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343439396338393637623064346235643239356266633536
type=BPF msg=audit(1739152642.598:8291): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152644.384:8292): table=nat:946 family=10 entries=14 op=nft_register_rule pid=78903 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152644.384:8292): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffebcb73150 a2=0 a3=7ffebcb7313c items=0 ppid=33621 pid=78903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152644.384:8292): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152644.385:8293): table=filter:947 family=10 entries=20 op=nft_register_rule pid=78903 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152644.385:8293): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffebcb73150 a2=0 a3=7ffebcb7313c items=0 ppid=33621 pid=78903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152644.385:8293): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152644.423:8294): table=nat:948 family=2 entries=18 op=nft_register_rule pid=78931 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152644.423:8294): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe31c094f0 a2=0 a3=7ffe31c094dc items=0 ppid=33621 pid=78931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152644.423:8294): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152644.424:8295): table=filter:949 family=2 entries=20 op=nft_register_rule pid=78931 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152644.424:8295): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe31c094f0 a2=0 a3=7ffe31c094dc items=0 ppid=33621 pid=78931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152644.424:8295): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152652.908:8296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152652.922:8297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152653.979:8298): prog-id=526 op=LOAD
type=BPF msg=audit(1739152653.980:8299): prog-id=527 op=LOAD
type=SYSCALL msg=audit(1739152653.980:8299): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00030c380 items=0 ppid=79384 pid=79395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152653.980:8299): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65633737663739623531396365666632643434316230366333
type=BPF msg=audit(1739152653.980:8300): prog-id=528 op=LOAD
type=SYSCALL msg=audit(1739152653.980:8300): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00030c3c8 items=0 ppid=79384 pid=79395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152653.980:8300): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65633737663739623531396365666632643434316230366333
type=BPF msg=audit(1739152653.981:8301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152653.981:8302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152653.981:8303): prog-id=529 op=LOAD
type=SYSCALL msg=audit(1739152653.981:8303): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00030c828 items=0 ppid=79384 pid=79395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152653.981:8303): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65633737663739623531396365666632643434316230366333
type=BPF msg=audit(1739152654.002:8304): prog-id=530 op=LOAD
type=BPF msg=audit(1739152654.003:8305): prog-id=531 op=LOAD
type=SYSCALL msg=audit(1739152654.003:8305): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003af3a0 items=0 ppid=79413 pid=79423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152654.003:8305): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376132343638373831656563336462626133346337356536
type=BPF msg=audit(1739152654.003:8306): prog-id=532 op=LOAD
type=SYSCALL msg=audit(1739152654.003:8306): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003af3e8 items=0 ppid=79413 pid=79423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152654.003:8306): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376132343638373831656563336462626133346337356536
type=BPF msg=audit(1739152654.003:8307): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152654.003:8308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152654.003:8309): prog-id=533 op=LOAD
type=SYSCALL msg=audit(1739152654.003:8309): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003af848 items=0 ppid=79413 pid=79423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152654.003:8309): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376132343638373831656563336462626133346337356536
type=BPF msg=audit(1739152660.578:8310): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152660.628:8311): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152665.493:8312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152665.504:8313): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152674.458:8314): table=nat:950 family=10 entries=14 op=nft_register_rule pid=79782 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152674.458:8314): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcdc2bd620 a2=0 a3=7ffcdc2bd60c items=0 ppid=33621 pid=79782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152674.458:8314): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152674.458:8315): table=filter:951 family=10 entries=20 op=nft_register_rule pid=79782 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152674.458:8315): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcdc2bd620 a2=0 a3=7ffcdc2bd60c items=0 ppid=33621 pid=79782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152674.458:8315): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152674.505:8316): table=nat:952 family=2 entries=18 op=nft_register_rule pid=79817 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152674.505:8316): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff4b5c1110 a2=0 a3=7fff4b5c10fc items=0 ppid=33621 pid=79817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152674.505:8316): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152674.505:8317): table=filter:953 family=2 entries=20 op=nft_register_rule pid=79817 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152674.505:8317): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff4b5c1110 a2=0 a3=7fff4b5c10fc items=0 ppid=33621 pid=79817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152674.505:8317): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152681.093:8318): prog-id=534 op=LOAD
type=BPF msg=audit(1739152681.094:8319): prog-id=535 op=LOAD
type=SYSCALL msg=audit(1739152681.094:8319): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0003863c0 items=0 ppid=79869 pid=79878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152681.094:8319): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336331343830376265363261623033626363326237316561
type=BPF msg=audit(1739152681.094:8320): prog-id=536 op=LOAD
type=SYSCALL msg=audit(1739152681.094:8320): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000386408 items=0 ppid=79869 pid=79878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152681.094:8320): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336331343830376265363261623033626363326237316561
type=BPF msg=audit(1739152681.094:8321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152681.094:8322): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152681.094:8323): prog-id=537 op=LOAD
type=SYSCALL msg=audit(1739152681.094:8323): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000386868 items=0 ppid=79869 pid=79878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152681.094:8323): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336331343830376265363261623033626363326237316561
type=BPF msg=audit(1739152702.477:8324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152702.489:8325): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152704.534:8326): table=nat:954 family=10 entries=14 op=nft_register_rule pid=80560 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152704.534:8326): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe52148150 a2=0 a3=7ffe5214813c items=0 ppid=33621 pid=80560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152704.534:8326): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152704.535:8327): table=filter:955 family=10 entries=20 op=nft_register_rule pid=80560 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152704.535:8327): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe52148150 a2=0 a3=7ffe5214813c items=0 ppid=33621 pid=80560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152704.535:8327): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152704.576:8328): table=nat:956 family=2 entries=18 op=nft_register_rule pid=80596 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152704.576:8328): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd1142dbb0 a2=0 a3=7ffd1142db9c items=0 ppid=33621 pid=80596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152704.576:8328): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152704.577:8329): table=filter:957 family=2 entries=20 op=nft_register_rule pid=80596 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152704.577:8329): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd1142dbb0 a2=0 a3=7ffd1142db9c items=0 ppid=33621 pid=80596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152704.577:8329): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152729.205:8330): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.215:8331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.291:8332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.332:8333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.883:8334): prog-id=538 op=LOAD
type=BPF msg=audit(1739152729.883:8335): prog-id=539 op=LOAD
type=SYSCALL msg=audit(1739152729.883:8335): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000302bf0 items=0 ppid=81150 pid=81166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.883:8335): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353066366538346334356232643366626564333563366130
type=BPF msg=audit(1739152729.883:8336): prog-id=540 op=LOAD
type=SYSCALL msg=audit(1739152729.883:8336): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000302c38 items=0 ppid=81150 pid=81166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.883:8336): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353066366538346334356232643366626564333563366130
type=BPF msg=audit(1739152729.883:8337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.883:8338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.883:8339): prog-id=541 op=LOAD
type=SYSCALL msg=audit(1739152729.883:8339): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000303098 items=0 ppid=81150 pid=81166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.883:8339): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353066366538346334356232643366626564333563366130
type=BPF msg=audit(1739152729.888:8340): prog-id=542 op=LOAD
type=BPF msg=audit(1739152729.888:8341): prog-id=543 op=LOAD
type=SYSCALL msg=audit(1739152729.888:8341): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003e0da0 items=0 ppid=81140 pid=81164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.888:8341): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643830643930303561343636323464356130653861613130
type=BPF msg=audit(1739152729.888:8342): prog-id=544 op=LOAD
type=SYSCALL msg=audit(1739152729.888:8342): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003e0de8 items=0 ppid=81140 pid=81164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.888:8342): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643830643930303561343636323464356130653861613130
type=BPF msg=audit(1739152729.888:8343): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.888:8344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152729.888:8345): prog-id=545 op=LOAD
type=SYSCALL msg=audit(1739152729.888:8345): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e1248 items=0 ppid=81140 pid=81164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152729.888:8345): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643830643930303561343636323464356130653861613130
type=BPF msg=audit(1739152730.102:8346): prog-id=546 op=LOAD
type=SYSCALL msg=audit(1739152730.102:8346): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c00022eed0 items=0 ppid=81272 pid=81283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.102:8346): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35393138326634386238373331646133383538623361623135
type=BPF msg=audit(1739152730.102:8347): prog-id=547 op=LOAD
type=SYSCALL msg=audit(1739152730.102:8347): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c00022ef18 items=0 ppid=81272 pid=81283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.102:8347): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35393138326634386238373331646133383538623361623135
type=BPF msg=audit(1739152730.102:8348): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152730.102:8349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152730.102:8350): prog-id=548 op=LOAD
type=SYSCALL msg=audit(1739152730.102:8350): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c00022efa8 items=0 ppid=81272 pid=81283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.102:8350): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35393138326634386238373331646133383538623361623135
type=BPF msg=audit(1739152730.205:8351): prog-id=549 op=LOAD
type=BPF msg=audit(1739152730.205:8352): prog-id=550 op=LOAD
type=SYSCALL msg=audit(1739152730.205:8352): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bb9d8 a2=78 a3=c0002fef60 items=0 ppid=81363 pid=81376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.205:8352): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643833616238396166373539373231623462353261643866
type=BPF msg=audit(1739152730.205:8353): prog-id=551 op=LOAD
type=SYSCALL msg=audit(1739152730.205:8353): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bb770 a2=78 a3=c0002fefa8 items=0 ppid=81363 pid=81376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.205:8353): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643833616238396166373539373231623462353261643866
type=BPF msg=audit(1739152730.206:8354): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152730.206:8355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152730.206:8356): prog-id=552 op=LOAD
type=SYSCALL msg=audit(1739152730.206:8356): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bbc30 a2=78 a3=c0002ff408 items=0 ppid=81363 pid=81376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152730.206:8356): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643833616238396166373539373231623462353261643866
type=BPF msg=audit(1739152730.361:8357): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152734.610:8358): table=nat:958 family=10 entries=14 op=nft_register_rule pid=81618 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152734.610:8358): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd08666000 a2=0 a3=7ffd08665fec items=0 ppid=33621 pid=81618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152734.610:8358): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152734.610:8359): table=filter:959 family=10 entries=20 op=nft_register_rule pid=81618 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152734.610:8359): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd08666000 a2=0 a3=7ffd08665fec items=0 ppid=33621 pid=81618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152734.610:8359): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152734.654:8360): table=nat:960 family=2 entries=18 op=nft_register_rule pid=81652 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152734.654:8360): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa3097250 a2=0 a3=7fffa309723c items=0 ppid=33621 pid=81652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152734.654:8360): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152734.654:8361): table=filter:961 family=2 entries=20 op=nft_register_rule pid=81652 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152734.654:8361): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa3097250 a2=0 a3=7fffa309723c items=0 ppid=33621 pid=81652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152734.654:8361): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152741.286:8362): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152741.294:8363): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1739152760.622:8364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739152764.723:8365): table=nat:962 family=10 entries=14 op=nft_register_rule pid=82242 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152764.723:8365): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdbe85f0f0 a2=0 a3=7ffdbe85f0dc items=0 ppid=33621 pid=82242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152764.723:8365): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152764.724:8366): table=filter:963 family=10 entries=20 op=nft_register_rule pid=82242 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152764.724:8366): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdbe85f0f0 a2=0 a3=7ffdbe85f0dc items=0 ppid=33621 pid=82242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152764.724:8366): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152764.749:8367): table=nat:964 family=2 entries=18 op=nft_register_rule pid=82262 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152764.749:8367): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe1dace050 a2=0 a3=7ffe1dace03c items=0 ppid=33621 pid=82262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152764.749:8367): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152764.749:8368): table=filter:965 family=2 entries=20 op=nft_register_rule pid=82262 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152764.749:8368): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1dace050 a2=0 a3=7ffe1dace03c items=0 ppid=33621 pid=82262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152764.749:8368): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152766.095:8369): prog-id=553 op=LOAD
type=BPF msg=audit(1739152766.095:8370): prog-id=554 op=LOAD
type=SYSCALL msg=audit(1739152766.095:8370): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c000223050 items=0 ppid=82271 pid=82281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152766.095:8370): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396432306461653138313062643131636635376165623334
type=BPF msg=audit(1739152766.095:8371): prog-id=555 op=LOAD
type=SYSCALL msg=audit(1739152766.095:8371): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000223098 items=0 ppid=82271 pid=82281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152766.095:8371): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396432306461653138313062643131636635376165623334
type=BPF msg=audit(1739152766.095:8372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152766.095:8373): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152766.096:8374): prog-id=556 op=LOAD
type=SYSCALL msg=audit(1739152766.096:8374): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c0002234f8 items=0 ppid=82271 pid=82281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152766.096:8374): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396432306461653138313062643131636635376165623334
type=BPF msg=audit(1739152790.385:8375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152790.399:8376): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152794.806:8377): table=nat:966 family=10 entries=14 op=nft_register_rule pid=82996 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152794.806:8377): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff0ba1e990 a2=0 a3=7fff0ba1e97c items=0 ppid=33621 pid=82996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152794.806:8377): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152794.807:8378): table=filter:967 family=10 entries=20 op=nft_register_rule pid=82996 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152794.807:8378): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff0ba1e990 a2=0 a3=7fff0ba1e97c items=0 ppid=33621 pid=82996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152794.807:8378): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152794.842:8379): table=nat:968 family=2 entries=18 op=nft_register_rule pid=83024 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152794.842:8379): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd0840e470 a2=0 a3=7ffd0840e45c items=0 ppid=33621 pid=83024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152794.842:8379): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152794.843:8380): table=filter:969 family=2 entries=20 op=nft_register_rule pid=83024 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152794.843:8380): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd0840e470 a2=0 a3=7ffd0840e45c items=0 ppid=33621 pid=83024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152794.843:8380): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152805.054:8381): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.072:8382): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.114:8383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.147:8384): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.832:8385): prog-id=557 op=LOAD
type=BPF msg=audit(1739152805.833:8386): prog-id=558 op=LOAD
type=SYSCALL msg=audit(1739152805.833:8386): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e2b40 items=0 ppid=83189 pid=83198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.833:8386): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396235323766653364313236323136336630376136393135
type=BPF msg=audit(1739152805.833:8387): prog-id=559 op=LOAD
type=SYSCALL msg=audit(1739152805.833:8387): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e2b88 items=0 ppid=83189 pid=83198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.833:8387): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396235323766653364313236323136336630376136393135
type=BPF msg=audit(1739152805.833:8388): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.833:8389): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.834:8390): prog-id=560 op=LOAD
type=SYSCALL msg=audit(1739152805.834:8390): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e2fe8 items=0 ppid=83189 pid=83198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.834:8390): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39396235323766653364313236323136336630376136393135
type=BPF msg=audit(1739152805.849:8391): prog-id=561 op=LOAD
type=BPF msg=audit(1739152805.850:8392): prog-id=562 op=LOAD
type=SYSCALL msg=audit(1739152805.850:8392): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000298420 items=0 ppid=83215 pid=83227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.850:8392): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666464393832333831633366343939666566613939663032
type=BPF msg=audit(1739152805.850:8393): prog-id=563 op=LOAD
type=SYSCALL msg=audit(1739152805.850:8393): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000298468 items=0 ppid=83215 pid=83227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.850:8393): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666464393832333831633366343939666566613939663032
type=BPF msg=audit(1739152805.850:8394): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.850:8395): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152805.850:8396): prog-id=564 op=LOAD
type=SYSCALL msg=audit(1739152805.850:8396): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002988c8 items=0 ppid=83215 pid=83227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152805.850:8396): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666464393832333831633366343939666566613939663032
type=AVC msg=audit(1739152818.524:8397): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.128.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739152818.524:8397): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739152818.524:8397): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739152818.963:8398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739152819.224:8399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739152824.876:8400): table=nat:970 family=10 entries=14 op=nft_register_rule pid=83801 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152824.876:8400): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe244c4000 a2=0 a3=7ffe244c3fec items=0 ppid=33621 pid=83801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152824.876:8400): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152824.877:8401): table=filter:971 family=10 entries=20 op=nft_register_rule pid=83801 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152824.877:8401): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe244c4000 a2=0 a3=7ffe244c3fec items=0 ppid=33621 pid=83801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152824.877:8401): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152824.920:8402): table=nat:972 family=2 entries=18 op=nft_register_rule pid=83836 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152824.920:8402): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdea13e230 a2=0 a3=7ffdea13e21c items=0 ppid=33621 pid=83836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152824.920:8402): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152824.921:8403): table=filter:973 family=2 entries=20 op=nft_register_rule pid=83836 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152824.921:8403): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdea13e230 a2=0 a3=7ffdea13e21c items=0 ppid=33621 pid=83836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152824.921:8403): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152826.283:8404): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152826.294:8405): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1739152829.492:8406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739152830.268:8407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1739152833.286:8408): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.129.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739152833.286:8408): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739152833.286:8408): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739152834.567:8409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739152834.762:8410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739152840.079:8411): prog-id=565 op=LOAD
type=BPF msg=audit(1739152840.079:8412): prog-id=566 op=LOAD
type=SYSCALL msg=audit(1739152840.079:8412): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000916b0 items=0 ppid=84229 pid=84239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152840.079:8412): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36656661363235386430643763376161663261653132346539
type=BPF msg=audit(1739152840.079:8413): prog-id=567 op=LOAD
type=SYSCALL msg=audit(1739152840.079:8413): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000916f8 items=0 ppid=84229 pid=84239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152840.079:8413): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36656661363235386430643763376161663261653132346539
type=BPF msg=audit(1739152840.079:8414): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152840.079:8415): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152840.079:8416): prog-id=568 op=LOAD
type=SYSCALL msg=audit(1739152840.079:8416): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000091b58 items=0 ppid=84229 pid=84239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152840.079:8416): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36656661363235386430643763376161663261653132346539
type=SERVICE_STOP msg=audit(1739152845.037:8417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739152845.736:8418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739152854.965:8419): table=nat:974 family=10 entries=14 op=nft_register_rule pid=84474 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152854.965:8419): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff97ede9a0 a2=0 a3=7fff97ede98c items=0 ppid=33621 pid=84474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152854.965:8419): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152854.966:8420): table=filter:975 family=10 entries=20 op=nft_register_rule pid=84474 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152854.966:8420): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff97ede9a0 a2=0 a3=7fff97ede98c items=0 ppid=33621 pid=84474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152854.966:8420): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152855.021:8421): table=nat:976 family=2 entries=18 op=nft_register_rule pid=84513 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152855.021:8421): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe2b0a7f60 a2=0 a3=7ffe2b0a7f4c items=0 ppid=33621 pid=84513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152855.021:8421): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152855.021:8422): table=filter:977 family=2 entries=20 op=nft_register_rule pid=84513 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152855.021:8422): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe2b0a7f60 a2=0 a3=7ffe2b0a7f4c items=0 ppid=33621 pid=84513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152855.021:8422): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152870.093:8423): prog-id=569 op=LOAD
type=BPF msg=audit(1739152870.094:8424): prog-id=570 op=LOAD
type=SYSCALL msg=audit(1739152870.094:8424): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001439d8 a2=78 a3=c0003863c0 items=0 ppid=84668 pid=84677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152870.094:8424): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313038386464666130326163326131633666313966646132
type=BPF msg=audit(1739152870.094:8425): prog-id=571 op=LOAD
type=SYSCALL msg=audit(1739152870.094:8425): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000143770 a2=78 a3=c000386408 items=0 ppid=84668 pid=84677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152870.094:8425): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313038386464666130326163326131633666313966646132
type=BPF msg=audit(1739152870.094:8426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152870.094:8427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152870.094:8428): prog-id=572 op=LOAD
type=SYSCALL msg=audit(1739152870.094:8428): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000143c30 a2=78 a3=c000386868 items=0 ppid=84668 pid=84677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152870.094:8428): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313038386464666130326163326131633666313966646132
type=AVC msg=audit(1739152877.395:8429): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.120.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739152877.395:8429): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739152877.395:8429): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739152877.664:8430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739152877.855:8431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739152881.013:8432): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.035:8433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.719:8434): prog-id=573 op=LOAD
type=BPF msg=audit(1739152881.720:8435): prog-id=574 op=LOAD
type=SYSCALL msg=audit(1739152881.720:8435): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00021caf0 items=0 ppid=85274 pid=85289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.720:8435): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633030356263346162313237373665393937666439343238
type=BPF msg=audit(1739152881.720:8436): prog-id=575 op=LOAD
type=SYSCALL msg=audit(1739152881.720:8436): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00021cb38 items=0 ppid=85274 pid=85289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.720:8436): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633030356263346162313237373665393937666439343238
type=BPF msg=audit(1739152881.720:8437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.720:8438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.720:8439): prog-id=576 op=LOAD
type=SYSCALL msg=audit(1739152881.720:8439): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00021cf98 items=0 ppid=85274 pid=85289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.720:8439): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633030356263346162313237373665393937666439343238
type=BPF msg=audit(1739152881.721:8440): prog-id=577 op=LOAD
type=BPF msg=audit(1739152881.721:8441): prog-id=578 op=LOAD
type=SYSCALL msg=audit(1739152881.721:8441): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000230420 items=0 ppid=85265 pid=85285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.721:8441): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38323733343830643033613632633430313939326565383436
type=BPF msg=audit(1739152881.721:8442): prog-id=579 op=LOAD
type=SYSCALL msg=audit(1739152881.721:8442): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000230468 items=0 ppid=85265 pid=85285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.721:8442): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38323733343830643033613632633430313939326565383436
type=BPF msg=audit(1739152881.721:8443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.721:8444): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152881.721:8445): prog-id=580 op=LOAD
type=SYSCALL msg=audit(1739152881.721:8445): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002308c8 items=0 ppid=85265 pid=85285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152881.721:8445): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38323733343830643033613632633430313939326565383436
type=NETFILTER_CFG msg=audit(1739152885.120:8446): table=nat:978 family=10 entries=14 op=nft_register_rule pid=85489 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152885.120:8446): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd501b7fd0 a2=0 a3=7ffd501b7fbc items=0 ppid=33621 pid=85489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152885.120:8446): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152885.121:8447): table=filter:979 family=10 entries=20 op=nft_register_rule pid=85489 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152885.121:8447): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd501b7fd0 a2=0 a3=7ffd501b7fbc items=0 ppid=33621 pid=85489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152885.121:8447): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152885.159:8448): table=nat:980 family=2 entries=18 op=nft_register_rule pid=85509 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152885.159:8448): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe963a95e0 a2=0 a3=7ffe963a95cc items=0 ppid=33621 pid=85509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152885.159:8448): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152885.160:8449): table=filter:981 family=2 entries=20 op=nft_register_rule pid=85509 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152885.160:8449): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe963a95e0 a2=0 a3=7ffe963a95cc items=0 ppid=33621 pid=85509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152885.160:8449): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1739152888.123:8450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739152888.810:8451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1739152889.954:8452): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.118.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739152889.954:8452): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739152889.954:8452): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739152891.232:8453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739152891.423:8454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739152894.116:8455): prog-id=581 op=LOAD
type=SYSCALL msg=audit(1739152894.116:8455): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c0001979d8 a2=78 a3=c00027ebf0 items=0 ppid=85871 pid=85881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152894.116:8455): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623330373764373864336665633138363164303232626564
type=BPF msg=audit(1739152894.116:8456): prog-id=582 op=LOAD
type=SYSCALL msg=audit(1739152894.116:8456): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197770 a2=78 a3=c00027ec38 items=0 ppid=85871 pid=85881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152894.116:8456): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623330373764373864336665633138363164303232626564
type=BPF msg=audit(1739152894.116:8457): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152894.116:8458): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152894.116:8459): prog-id=583 op=LOAD
type=SYSCALL msg=audit(1739152894.116:8459): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c000197c30 a2=78 a3=c00027ecc8 items=0 ppid=85871 pid=85881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152894.116:8459): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623330373764373864336665633138363164303232626564
type=BPF msg=audit(1739152894.393:8460): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152900.254:8461): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152900.265:8462): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152900.274:8463): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152900.311:8464): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1739152901.701:8465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739152902.373:8466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739152915.204:8467): table=nat:982 family=10 entries=14 op=nft_register_rule pid=86278 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152915.204:8467): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffce52ed830 a2=0 a3=7ffce52ed81c items=0 ppid=33621 pid=86278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152915.204:8467): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152915.205:8468): table=filter:983 family=10 entries=20 op=nft_register_rule pid=86278 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152915.205:8468): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffce52ed830 a2=0 a3=7ffce52ed81c items=0 ppid=33621 pid=86278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152915.205:8468): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152915.240:8469): table=nat:984 family=2 entries=18 op=nft_register_rule pid=86307 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152915.240:8469): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff36935940 a2=0 a3=7fff3693592c items=0 ppid=33621 pid=86307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152915.240:8469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152915.240:8470): table=filter:985 family=2 entries=20 op=nft_register_rule pid=86307 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152915.240:8470): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff36935940 a2=0 a3=7fff3693592c items=0 ppid=33621 pid=86307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152915.240:8470): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152930.288:8471): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152930.302:8472): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739152945.274:8473): table=nat:986 family=10 entries=14 op=nft_register_rule pid=86857 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152945.274:8473): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff3db006b0 a2=0 a3=7fff3db0069c items=0 ppid=33621 pid=86857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152945.274:8473): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152945.275:8474): table=filter:987 family=10 entries=20 op=nft_register_rule pid=86857 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152945.275:8474): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3db006b0 a2=0 a3=7fff3db0069c items=0 ppid=33621 pid=86857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152945.275:8474): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152945.317:8475): table=nat:988 family=2 entries=18 op=nft_register_rule pid=86891 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152945.317:8475): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd57f36680 a2=0 a3=7ffd57f3666c items=0 ppid=33621 pid=86891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152945.317:8475): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152945.317:8476): table=filter:989 family=2 entries=20 op=nft_register_rule pid=86891 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152945.317:8476): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd57f36680 a2=0 a3=7ffd57f3666c items=0 ppid=33621 pid=86891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152945.317:8476): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152956.881:8477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152956.885:8478): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152956.941:8479): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152956.978:8480): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152957.681:8481): prog-id=584 op=LOAD
type=BPF msg=audit(1739152957.682:8482): prog-id=585 op=LOAD
type=SYSCALL msg=audit(1739152957.682:8482): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a0620 items=0 ppid=87302 pid=87319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.682:8482): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386162333763613262633137623737383733383963633531
type=BPF msg=audit(1739152957.682:8483): prog-id=586 op=LOAD
type=SYSCALL msg=audit(1739152957.682:8483): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000a0668 items=0 ppid=87302 pid=87319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.682:8483): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386162333763613262633137623737383733383963633531
type=BPF msg=audit(1739152957.682:8484): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152957.682:8485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152957.682:8486): prog-id=587 op=LOAD
type=SYSCALL msg=audit(1739152957.682:8486): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000a0ac8 items=0 ppid=87302 pid=87319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.682:8486): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64386162333763613262633137623737383733383963633531
type=BPF msg=audit(1739152957.684:8487): prog-id=588 op=LOAD
type=BPF msg=audit(1739152957.684:8488): prog-id=589 op=LOAD
type=SYSCALL msg=audit(1739152957.684:8488): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bb9d8 a2=78 a3=c000354840 items=0 ppid=87293 pid=87309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.684:8488): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37333132353363656332326266333436616239326134633766
type=BPF msg=audit(1739152957.684:8489): prog-id=590 op=LOAD
type=SYSCALL msg=audit(1739152957.684:8489): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bb770 a2=78 a3=c000354888 items=0 ppid=87293 pid=87309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.684:8489): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37333132353363656332326266333436616239326134633766
type=BPF msg=audit(1739152957.684:8490): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152957.684:8491): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152957.684:8492): prog-id=591 op=LOAD
type=SYSCALL msg=audit(1739152957.684:8492): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bbc30 a2=78 a3=c000354ce8 items=0 ppid=87293 pid=87309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152957.684:8492): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37333132353363656332326266333436616239326134633766
type=NETFILTER_CFG msg=audit(1739152975.360:8493): table=nat:990 family=10 entries=14 op=nft_register_rule pid=87572 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152975.360:8493): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe076ed3c0 a2=0 a3=7ffe076ed3ac items=0 ppid=33621 pid=87572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152975.360:8493): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152975.361:8494): table=filter:991 family=10 entries=20 op=nft_register_rule pid=87572 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739152975.361:8494): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe076ed3c0 a2=0 a3=7ffe076ed3ac items=0 ppid=33621 pid=87572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152975.361:8494): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152975.405:8495): table=nat:992 family=2 entries=18 op=nft_register_rule pid=87605 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152975.405:8495): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffddfed4130 a2=0 a3=7ffddfed411c items=0 ppid=33621 pid=87605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152975.405:8495): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739152975.406:8496): table=filter:993 family=2 entries=20 op=nft_register_rule pid=87605 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739152975.406:8496): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffddfed4130 a2=0 a3=7ffddfed411c items=0 ppid=33621 pid=87605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152975.406:8496): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739152982.104:8497): prog-id=592 op=LOAD
type=BPF msg=audit(1739152982.105:8498): prog-id=593 op=LOAD
type=SYSCALL msg=audit(1739152982.105:8498): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019d9d8 a2=78 a3=c0003a0560 items=0 ppid=87645 pid=87655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152982.105:8498): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613765373033373632306265633562313765316664663530
type=BPF msg=audit(1739152982.105:8499): prog-id=594 op=LOAD
type=SYSCALL msg=audit(1739152982.105:8499): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019d770 a2=78 a3=c0003a05a8 items=0 ppid=87645 pid=87655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152982.105:8499): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613765373033373632306265633562313765316664663530
type=BPF msg=audit(1739152982.105:8500): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152982.105:8501): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739152982.105:8502): prog-id=595 op=LOAD
type=SYSCALL msg=audit(1739152982.105:8502): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019dc30 a2=78 a3=c0003a0a08 items=0 ppid=87645 pid=87655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739152982.105:8502): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33613765373033373632306265633562313765316664663530
type=NETFILTER_CFG msg=audit(1739153005.431:8503): table=nat:994 family=10 entries=14 op=nft_register_rule pid=88223 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153005.431:8503): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffecdbd5140 a2=0 a3=7ffecdbd512c items=0 ppid=33621 pid=88223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153005.431:8503): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153005.437:8504): table=filter:995 family=10 entries=20 op=nft_register_rule pid=88223 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153005.437:8504): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffecdbd5140 a2=0 a3=7ffecdbd512c items=0 ppid=33621 pid=88223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153005.437:8504): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153005.481:8505): table=nat:996 family=2 entries=18 op=nft_register_rule pid=88262 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153005.481:8505): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe69929de0 a2=0 a3=7ffe69929dcc items=0 ppid=33621 pid=88262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153005.481:8505): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153005.481:8506): table=filter:997 family=2 entries=20 op=nft_register_rule pid=88262 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153005.481:8506): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe69929de0 a2=0 a3=7ffe69929dcc items=0 ppid=33621 pid=88262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153005.481:8506): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153018.096:8507): prog-id=596 op=LOAD
type=BPF msg=audit(1739153018.096:8508): prog-id=597 op=LOAD
type=SYSCALL msg=audit(1739153018.096:8508): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00038c000 items=0 ppid=88602 pid=88611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153018.096:8508): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32653466333038343839613938326334343936633232336434
type=BPF msg=audit(1739153018.096:8509): prog-id=598 op=LOAD
type=SYSCALL msg=audit(1739153018.096:8509): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00038c048 items=0 ppid=88602 pid=88611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153018.096:8509): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32653466333038343839613938326334343936633232336434
type=BPF msg=audit(1739153018.096:8510): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153018.096:8511): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153018.097:8512): prog-id=599 op=LOAD
type=SYSCALL msg=audit(1739153018.097:8512): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038c4a8 items=0 ppid=88602 pid=88611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153018.097:8512): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32653466333038343839613938326334343936633232336434
type=BPF msg=audit(1739153032.871:8513): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153032.878:8514): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153033.506:8515): prog-id=600 op=LOAD
type=BPF msg=audit(1739153033.506:8516): prog-id=601 op=LOAD
type=SYSCALL msg=audit(1739153033.506:8516): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002984e0 items=0 ppid=88981 pid=88992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.506:8516): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323834393161386537373464346461383937383836346638
type=BPF msg=audit(1739153033.507:8517): prog-id=602 op=LOAD
type=SYSCALL msg=audit(1739153033.507:8517): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000298528 items=0 ppid=88981 pid=88992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.507:8517): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323834393161386537373464346461383937383836346638
type=BPF msg=audit(1739153033.507:8518): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153033.507:8519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153033.507:8520): prog-id=603 op=LOAD
type=SYSCALL msg=audit(1739153033.507:8520): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000298988 items=0 ppid=88981 pid=88992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.507:8520): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323834393161386537373464346461383937383836346638
type=BPF msg=audit(1739153033.508:8521): prog-id=604 op=LOAD
type=BPF msg=audit(1739153033.508:8522): prog-id=605 op=LOAD
type=SYSCALL msg=audit(1739153033.508:8522): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024740 items=0 ppid=88998 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.508:8522): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37393465633632386132626232333635373139356264646266
type=BPF msg=audit(1739153033.508:8523): prog-id=606 op=LOAD
type=SYSCALL msg=audit(1739153033.508:8523): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024788 items=0 ppid=88998 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.508:8523): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37393465633632386132626232333635373139356264646266
type=BPF msg=audit(1739153033.508:8524): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153033.508:8525): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153033.508:8526): prog-id=607 op=LOAD
type=SYSCALL msg=audit(1739153033.508:8526): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000024be8 items=0 ppid=88998 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153033.508:8526): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37393465633632386132626232333635373139356264646266
type=NETFILTER_CFG msg=audit(1739153035.503:8527): table=nat:998 family=10 entries=14 op=nft_register_rule pid=89165 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153035.503:8527): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff3010b4f0 a2=0 a3=7fff3010b4dc items=0 ppid=33621 pid=89165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153035.503:8527): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153035.504:8528): table=filter:999 family=10 entries=20 op=nft_register_rule pid=89165 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153035.504:8528): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff3010b4f0 a2=0 a3=7fff3010b4dc items=0 ppid=33621 pid=89165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153035.504:8528): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153035.560:8529): table=nat:1000 family=2 entries=18 op=nft_register_rule pid=89209 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153035.560:8529): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffee0c97a50 a2=0 a3=7ffee0c97a3c items=0 ppid=33621 pid=89209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153035.560:8529): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153035.560:8530): table=filter:1001 family=2 entries=20 op=nft_register_rule pid=89209 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153035.560:8530): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffee0c97a50 a2=0 a3=7ffee0c97a3c items=0 ppid=33621 pid=89209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153035.560:8530): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153042.265:8531): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153042.280:8532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153042.288:8533): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153042.288:8534): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153065.570:8535): table=nat:1002 family=10 entries=14 op=nft_register_rule pid=89781 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153065.570:8535): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffca3ba1a70 a2=0 a3=7ffca3ba1a5c items=0 ppid=33621 pid=89781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153065.570:8535): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153065.571:8536): table=filter:1003 family=10 entries=20 op=nft_register_rule pid=89781 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153065.571:8536): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffca3ba1a70 a2=0 a3=7ffca3ba1a5c items=0 ppid=33621 pid=89781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153065.571:8536): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153065.637:8537): table=nat:1004 family=2 entries=18 op=nft_register_rule pid=89832 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153065.637:8537): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc55243310 a2=0 a3=7ffc552432fc items=0 ppid=33621 pid=89832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153065.637:8537): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153065.637:8538): table=filter:1005 family=2 entries=20 op=nft_register_rule pid=89832 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153065.637:8538): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc55243310 a2=0 a3=7ffc552432fc items=0 ppid=33621 pid=89832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153065.637:8538): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153078.283:8539): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153078.294:8540): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153095.643:8541): table=nat:1006 family=10 entries=14 op=nft_register_rule pid=90317 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153095.643:8541): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff30a6e890 a2=0 a3=7fff30a6e87c items=0 ppid=33621 pid=90317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153095.643:8541): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153095.644:8542): table=filter:1007 family=10 entries=20 op=nft_register_rule pid=90317 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153095.644:8542): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff30a6e890 a2=0 a3=7fff30a6e87c items=0 ppid=33621 pid=90317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153095.644:8542): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153095.709:8543): table=nat:1008 family=2 entries=18 op=nft_register_rule pid=90370 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153095.709:8543): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc6998a4c0 a2=0 a3=7ffc6998a4ac items=0 ppid=33621 pid=90370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153095.709:8543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153095.709:8544): table=filter:1009 family=2 entries=20 op=nft_register_rule pid=90370 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153095.709:8544): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc6998a4c0 a2=0 a3=7ffc6998a4ac items=0 ppid=33621 pid=90370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153095.709:8544): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153108.687:8545): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153108.694:8546): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153108.782:8547): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153108.811:8548): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153109.413:8549): prog-id=608 op=LOAD
type=BPF msg=audit(1739153109.413:8550): prog-id=609 op=LOAD
type=SYSCALL msg=audit(1739153109.413:8550): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002056a0 items=0 ppid=90552 pid=90562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.413:8550): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666663323836646665323764346565326566666534633238
type=BPF msg=audit(1739153109.414:8551): prog-id=610 op=LOAD
type=SYSCALL msg=audit(1739153109.414:8551): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002056e8 items=0 ppid=90552 pid=90562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.414:8551): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666663323836646665323764346565326566666534633238
type=BPF msg=audit(1739153109.414:8552): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153109.414:8553): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153109.414:8554): prog-id=611 op=LOAD
type=SYSCALL msg=audit(1739153109.414:8554): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000205b48 items=0 ppid=90552 pid=90562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.414:8554): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666663323836646665323764346565326566666534633238
type=BPF msg=audit(1739153109.419:8555): prog-id=612 op=LOAD
type=BPF msg=audit(1739153109.420:8556): prog-id=613 op=LOAD
type=SYSCALL msg=audit(1739153109.420:8556): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003e2de0 items=0 ppid=90574 pid=90585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.420:8556): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333130346161356330353531393934636463626166646361
type=BPF msg=audit(1739153109.420:8557): prog-id=614 op=LOAD
type=SYSCALL msg=audit(1739153109.420:8557): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003e2e28 items=0 ppid=90574 pid=90585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.420:8557): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333130346161356330353531393934636463626166646361
type=BPF msg=audit(1739153109.420:8558): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153109.420:8559): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153109.420:8560): prog-id=615 op=LOAD
type=SYSCALL msg=audit(1739153109.420:8560): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e3288 items=0 ppid=90574 pid=90585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153109.420:8560): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333130346161356330353531393934636463626166646361
type=AVC msg=audit(1739153118.644:8561): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.136.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153118.644:8561): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153118.644:8561): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153119.014:8562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153119.251:8563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153125.714:8564): table=nat:1010 family=10 entries=14 op=nft_register_rule pid=91084 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153125.714:8564): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd7facf950 a2=0 a3=7ffd7facf93c items=0 ppid=33621 pid=91084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153125.714:8564): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153125.715:8565): table=filter:1011 family=10 entries=20 op=nft_register_rule pid=91084 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153125.715:8565): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd7facf950 a2=0 a3=7ffd7facf93c items=0 ppid=33621 pid=91084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153125.715:8565): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153125.785:8566): table=nat:1012 family=2 entries=18 op=nft_register_rule pid=91137 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153125.785:8566): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc65a93100 a2=0 a3=7ffc65a930ec items=0 ppid=33621 pid=91137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153125.785:8566): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153125.786:8567): table=filter:1013 family=2 entries=20 op=nft_register_rule pid=91137 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153125.786:8567): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc65a93100 a2=0 a3=7ffc65a930ec items=0 ppid=33621 pid=91137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153125.786:8567): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1739153129.545:8568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153130.329:8569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1739153133.266:8570): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.137.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153133.266:8570): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153133.266:8570): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153134.555:8571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153134.752:8572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153145.032:8573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153145.712:8574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153155.794:8575): table=nat:1014 family=10 entries=14 op=nft_register_rule pid=91595 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153155.794:8575): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fffe31f6f80 a2=0 a3=7fffe31f6f6c items=0 ppid=33621 pid=91595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153155.794:8575): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153155.795:8576): table=filter:1015 family=10 entries=20 op=nft_register_rule pid=91595 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153155.795:8576): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffe31f6f80 a2=0 a3=7fffe31f6f6c items=0 ppid=33621 pid=91595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153155.795:8576): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153155.859:8577): table=nat:1016 family=2 entries=18 op=nft_register_rule pid=91648 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153155.859:8577): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa5c2ccd0 a2=0 a3=7fffa5c2ccbc items=0 ppid=33621 pid=91648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153155.859:8577): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153155.859:8578): table=filter:1017 family=2 entries=20 op=nft_register_rule pid=91648 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153155.859:8578): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa5c2ccd0 a2=0 a3=7fffa5c2ccbc items=0 ppid=33621 pid=91648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153155.859:8578): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153184.572:8579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153184.592:8580): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153184.634:8581): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153184.680:8582): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153185.253:8583): prog-id=616 op=LOAD
type=BPF msg=audit(1739153185.254:8584): prog-id=617 op=LOAD
type=SYSCALL msg=audit(1739153185.254:8584): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c000286920 items=0 ppid=92174 pid=92199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.254:8584): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313230616638666133303435663731303132336639363930
type=BPF msg=audit(1739153185.254:8585): prog-id=618 op=LOAD
type=SYSCALL msg=audit(1739153185.254:8585): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000286968 items=0 ppid=92174 pid=92199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.254:8585): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313230616638666133303435663731303132336639363930
type=BPF msg=audit(1739153185.254:8586): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153185.254:8587): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153185.254:8588): prog-id=619 op=LOAD
type=SYSCALL msg=audit(1739153185.254:8588): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c000286dc8 items=0 ppid=92174 pid=92199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.254:8588): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313230616638666133303435663731303132336639363930
type=BPF msg=audit(1739153185.255:8589): prog-id=620 op=LOAD
type=BPF msg=audit(1739153185.255:8590): prog-id=621 op=LOAD
type=SYSCALL msg=audit(1739153185.255:8590): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000280390 items=0 ppid=92183 pid=92200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.255:8590): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32393265633335393166373965336562366135363366663561
type=BPF msg=audit(1739153185.255:8591): prog-id=622 op=LOAD
type=SYSCALL msg=audit(1739153185.255:8591): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0002803d8 items=0 ppid=92183 pid=92200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.255:8591): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32393265633335393166373965336562366135363366663561
type=BPF msg=audit(1739153185.256:8592): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153185.256:8593): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153185.256:8594): prog-id=623 op=LOAD
type=SYSCALL msg=audit(1739153185.256:8594): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000280838 items=0 ppid=92183 pid=92200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.256:8594): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32393265633335393166373965336562366135363366663561
type=NETFILTER_CFG msg=audit(1739153185.868:8595): table=nat:1018 family=10 entries=14 op=nft_register_rule pid=92349 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153185.868:8595): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe900be290 a2=0 a3=7ffe900be27c items=0 ppid=33621 pid=92349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.868:8595): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153185.869:8596): table=filter:1019 family=10 entries=20 op=nft_register_rule pid=92349 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153185.869:8596): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe900be290 a2=0 a3=7ffe900be27c items=0 ppid=33621 pid=92349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.869:8596): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153185.942:8597): table=nat:1020 family=2 entries=18 op=nft_register_rule pid=92406 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153185.942:8597): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff2e4d22a0 a2=0 a3=7fff2e4d228c items=0 ppid=33621 pid=92406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.942:8597): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153185.943:8598): table=filter:1021 family=2 entries=20 op=nft_register_rule pid=92406 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153185.943:8598): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff2e4d22a0 a2=0 a3=7fff2e4d228c items=0 ppid=33621 pid=92406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153185.943:8598): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=AVC msg=audit(1739153189.994:8599): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.126.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153189.994:8599): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153189.994:8599): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153191.269:8600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153191.463:8601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739153198.139:8602): prog-id=624 op=LOAD
type=SYSCALL msg=audit(1739153198.139:8602): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00011f9d8 a2=78 a3=c0003788e0 items=0 ppid=92732 pid=92742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153198.139:8602): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383761366362346437323631386638653535633037316261
type=BPF msg=audit(1739153198.139:8603): prog-id=625 op=LOAD
type=SYSCALL msg=audit(1739153198.139:8603): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f770 a2=78 a3=c000378928 items=0 ppid=92732 pid=92742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153198.139:8603): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383761366362346437323631386638653535633037316261
type=BPF msg=audit(1739153198.139:8604): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153198.139:8605): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153198.139:8606): prog-id=626 op=LOAD
type=SYSCALL msg=audit(1739153198.139:8606): arch=c000003e syscall=321 success=yes exit=14 a0=5 a1=c00011fc30 a2=78 a3=c0003789b8 items=0 ppid=92732 pid=92742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153198.139:8606): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383761366362346437323631386638653535633037316261
type=BPF msg=audit(1739153198.469:8607): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1739153201.745:8608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153202.421:8609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739153211.155:8610): prog-id=627 op=LOAD
type=BPF msg=audit(1739153211.156:8611): prog-id=628 op=LOAD
type=SYSCALL msg=audit(1739153211.156:8611): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ba480 items=0 ppid=92949 pid=92957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153211.156:8611): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353834636634363536333366336464666436373533623966
type=BPF msg=audit(1739153211.156:8612): prog-id=629 op=LOAD
type=SYSCALL msg=audit(1739153211.156:8612): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ba4c8 items=0 ppid=92949 pid=92957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153211.156:8612): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353834636634363536333366336464666436373533623966
type=BPF msg=audit(1739153211.156:8613): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153211.156:8614): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153211.156:8615): prog-id=630 op=LOAD
type=SYSCALL msg=audit(1739153211.156:8615): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ba928 items=0 ppid=92949 pid=92957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153211.156:8615): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353834636634363536333366336464666436373533623966
type=NETFILTER_CFG msg=audit(1739153215.948:8616): table=nat:1022 family=10 entries=14 op=nft_register_rule pid=93128 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153215.948:8616): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff0ab66df0 a2=0 a3=7fff0ab66ddc items=0 ppid=33621 pid=93128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153215.948:8616): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153215.949:8617): table=filter:1023 family=10 entries=20 op=nft_register_rule pid=93128 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153215.949:8617): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff0ab66df0 a2=0 a3=7fff0ab66ddc items=0 ppid=33621 pid=93128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153215.949:8617): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153216.013:8618): table=nat:1024 family=2 entries=18 op=nft_register_rule pid=93181 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153216.013:8618): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd9e7a0fd0 a2=0 a3=7ffd9e7a0fbc items=0 ppid=33621 pid=93181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153216.013:8618): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153216.014:8619): table=filter:1025 family=2 entries=20 op=nft_register_rule pid=93181 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153216.014:8619): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd9e7a0fd0 a2=0 a3=7ffd9e7a0fbc items=0 ppid=33621 pid=93181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153216.014:8619): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153241.092:8620): prog-id=631 op=LOAD
type=BPF msg=audit(1739153241.093:8621): prog-id=632 op=LOAD
type=SYSCALL msg=audit(1739153241.093:8621): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003bc380 items=0 ppid=93620 pid=93628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153241.093:8621): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303637363063303338626631363830333966326331333066
type=BPF msg=audit(1739153241.093:8622): prog-id=633 op=LOAD
type=SYSCALL msg=audit(1739153241.093:8622): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003bc3c8 items=0 ppid=93620 pid=93628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153241.093:8622): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303637363063303338626631363830333966326331333066
type=BPF msg=audit(1739153241.093:8623): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153241.093:8624): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153241.093:8625): prog-id=634 op=LOAD
type=SYSCALL msg=audit(1739153241.093:8625): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003bc828 items=0 ppid=93620 pid=93628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153241.093:8625): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65303637363063303338626631363830333966326331333066
type=NETFILTER_CFG msg=audit(1739153246.018:8626): table=nat:1026 family=10 entries=14 op=nft_register_rule pid=93856 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153246.018:8626): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd4648a7e0 a2=0 a3=7ffd4648a7cc items=0 ppid=33621 pid=93856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153246.018:8626): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153246.019:8627): table=filter:1027 family=10 entries=20 op=nft_register_rule pid=93856 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153246.019:8627): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd4648a7e0 a2=0 a3=7ffd4648a7cc items=0 ppid=33621 pid=93856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153246.019:8627): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153246.089:8628): table=nat:1028 family=2 entries=18 op=nft_register_rule pid=93909 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153246.089:8628): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffbbda9110 a2=0 a3=7fffbbda90fc items=0 ppid=33621 pid=93909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153246.089:8628): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153246.090:8629): table=filter:1029 family=2 entries=20 op=nft_register_rule pid=93909 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153246.090:8629): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffbbda9110 a2=0 a3=7fffbbda90fc items=0 ppid=33621 pid=93909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153246.090:8629): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153260.436:8630): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153260.441:8631): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153260.577:8632): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153260.618:8633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153261.308:8634): prog-id=635 op=LOAD
type=BPF msg=audit(1739153261.308:8635): prog-id=636 op=LOAD
type=SYSCALL msg=audit(1739153261.308:8635): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000216f80 items=0 ppid=94393 pid=94401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.308:8635): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62336638353532313334303166313134363961623563383138
type=BPF msg=audit(1739153261.309:8636): prog-id=637 op=LOAD
type=SYSCALL msg=audit(1739153261.309:8636): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000216fc8 items=0 ppid=94393 pid=94401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.309:8636): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62336638353532313334303166313134363961623563383138
type=BPF msg=audit(1739153261.309:8637): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153261.309:8638): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153261.309:8639): prog-id=638 op=LOAD
type=SYSCALL msg=audit(1739153261.309:8639): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000217428 items=0 ppid=94393 pid=94401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.309:8639): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62336638353532313334303166313134363961623563383138
type=BPF msg=audit(1739153261.315:8640): prog-id=639 op=LOAD
type=BPF msg=audit(1739153261.316:8641): prog-id=640 op=LOAD
type=SYSCALL msg=audit(1739153261.316:8641): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000024b00 items=0 ppid=94416 pid=94427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.316:8641): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313931643839666137363031383363333361383531353764
type=BPF msg=audit(1739153261.316:8642): prog-id=641 op=LOAD
type=SYSCALL msg=audit(1739153261.316:8642): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000024b48 items=0 ppid=94416 pid=94427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.316:8642): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313931643839666137363031383363333361383531353764
type=BPF msg=audit(1739153261.316:8643): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153261.316:8644): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153261.316:8645): prog-id=642 op=LOAD
type=SYSCALL msg=audit(1739153261.316:8645): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000024fa8 items=0 ppid=94416 pid=94427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153261.316:8645): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313931643839666137363031383363333361383531353764
type=BPF msg=audit(1739153271.321:8646): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153271.334:8647): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153276.089:8648): table=nat:1030 family=10 entries=14 op=nft_register_rule pid=94716 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153276.089:8648): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe84f5e150 a2=0 a3=7ffe84f5e13c items=0 ppid=33621 pid=94716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153276.089:8648): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153276.090:8649): table=filter:1031 family=10 entries=20 op=nft_register_rule pid=94716 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153276.090:8649): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe84f5e150 a2=0 a3=7ffe84f5e13c items=0 ppid=33621 pid=94716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153276.090:8649): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153276.158:8650): table=nat:1032 family=2 entries=18 op=nft_register_rule pid=94769 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153276.158:8650): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd23e01ae0 a2=0 a3=7ffd23e01acc items=0 ppid=33621 pid=94769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153276.158:8650): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153276.159:8651): table=filter:1033 family=2 entries=20 op=nft_register_rule pid=94769 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153276.159:8651): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd23e01ae0 a2=0 a3=7ffd23e01acc items=0 ppid=33621 pid=94769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153276.159:8651): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153301.276:8652): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153301.288:8653): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153306.158:8654): table=nat:1034 family=10 entries=14 op=nft_register_rule pid=95300 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153306.158:8654): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc86f50750 a2=0 a3=7ffc86f5073c items=0 ppid=33621 pid=95300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153306.158:8654): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153306.159:8655): table=filter:1035 family=10 entries=20 op=nft_register_rule pid=95300 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153306.159:8655): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc86f50750 a2=0 a3=7ffc86f5073c items=0 ppid=33621 pid=95300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153306.159:8655): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153306.226:8656): table=nat:1036 family=2 entries=18 op=nft_register_rule pid=95353 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153306.226:8656): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdc69dcdd0 a2=0 a3=7ffdc69dcdbc items=0 ppid=33621 pid=95353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153306.226:8656): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153306.227:8657): table=filter:1037 family=2 entries=20 op=nft_register_rule pid=95353 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153306.227:8657): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdc69dcdd0 a2=0 a3=7ffdc69dcdbc items=0 ppid=33621 pid=95353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153306.227:8657): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153336.230:8658): table=nat:1038 family=10 entries=14 op=nft_register_rule pid=95794 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153336.230:8658): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc360620a0 a2=0 a3=7ffc3606208c items=0 ppid=33621 pid=95794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153336.230:8658): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153336.230:8659): table=filter:1039 family=10 entries=20 op=nft_register_rule pid=95794 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153336.230:8659): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc360620a0 a2=0 a3=7ffc3606208c items=0 ppid=33621 pid=95794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153336.230:8659): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153336.301:8660): table=nat:1040 family=2 entries=18 op=nft_register_rule pid=95847 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153336.301:8660): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcb28f02d0 a2=0 a3=7ffcb28f02bc items=0 ppid=33621 pid=95847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153336.301:8660): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153336.301:8661): table=filter:1041 family=2 entries=20 op=nft_register_rule pid=95847 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153336.301:8661): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb28f02d0 a2=0 a3=7ffcb28f02bc items=0 ppid=33621 pid=95847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153336.301:8661): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153336.490:8662): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153336.499:8663): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153336.556:8664): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153336.594:8665): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153337.234:8666): prog-id=643 op=LOAD
type=BPF msg=audit(1739153337.236:8667): prog-id=644 op=LOAD
type=SYSCALL msg=audit(1739153337.236:8667): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002951f0 items=0 ppid=95949 pid=95959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.236:8667): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326661633030373832616132326233666130613632363138
type=BPF msg=audit(1739153337.236:8668): prog-id=645 op=LOAD
type=SYSCALL msg=audit(1739153337.236:8668): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000295238 items=0 ppid=95949 pid=95959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.236:8668): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326661633030373832616132326233666130613632363138
type=BPF msg=audit(1739153337.236:8669): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153337.236:8670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153337.236:8671): prog-id=646 op=LOAD
type=SYSCALL msg=audit(1739153337.236:8671): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000295698 items=0 ppid=95949 pid=95959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.236:8671): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30326661633030373832616132326233666130613632363138
type=BPF msg=audit(1739153337.256:8672): prog-id=647 op=LOAD
type=BPF msg=audit(1739153337.256:8673): prog-id=648 op=LOAD
type=SYSCALL msg=audit(1739153337.256:8673): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00030e810 items=0 ppid=95976 pid=95987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.256:8673): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326237336438613838663833373563383733666435363539
type=BPF msg=audit(1739153337.257:8674): prog-id=649 op=LOAD
type=SYSCALL msg=audit(1739153337.257:8674): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00030e858 items=0 ppid=95976 pid=95987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.257:8674): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326237336438613838663833373563383733666435363539
type=BPF msg=audit(1739153337.257:8675): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153337.257:8676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153337.257:8677): prog-id=650 op=LOAD
type=SYSCALL msg=audit(1739153337.257:8677): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00030ecb8 items=0 ppid=95976 pid=95987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153337.257:8677): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39326237336438613838663833373563383733666435363539
type=NETFILTER_CFG msg=audit(1739153366.300:8678): table=nat:1042 family=10 entries=14 op=nft_register_rule pid=96534 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153366.300:8678): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffef4576850 a2=0 a3=7ffef457683c items=0 ppid=33621 pid=96534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153366.300:8678): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153366.301:8679): table=filter:1043 family=10 entries=20 op=nft_register_rule pid=96534 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153366.301:8679): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffef4576850 a2=0 a3=7ffef457683c items=0 ppid=33621 pid=96534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153366.301:8679): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153366.374:8680): table=nat:1044 family=2 entries=18 op=nft_register_rule pid=96587 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153366.374:8680): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdd4bf5c90 a2=0 a3=7ffdd4bf5c7c items=0 ppid=33621 pid=96587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153366.374:8680): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153366.375:8681): table=filter:1045 family=2 entries=20 op=nft_register_rule pid=96587 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153366.375:8681): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdd4bf5c90 a2=0 a3=7ffdd4bf5c7c items=0 ppid=33621 pid=96587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153366.375:8681): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153396.407:8682): table=nat:1046 family=10 entries=14 op=nft_register_rule pid=97044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153396.407:8682): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc9a091090 a2=0 a3=7ffc9a09107c items=0 ppid=33621 pid=97044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153396.407:8682): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153396.407:8683): table=filter:1047 family=10 entries=20 op=nft_register_rule pid=97044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153396.407:8683): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc9a091090 a2=0 a3=7ffc9a09107c items=0 ppid=33621 pid=97044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153396.407:8683): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153396.456:8684): table=nat:1048 family=2 entries=18 op=nft_register_rule pid=97084 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153396.456:8684): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe0fcd94c0 a2=0 a3=7ffe0fcd94ac items=0 ppid=33621 pid=97084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153396.456:8684): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153396.457:8685): table=filter:1049 family=2 entries=20 op=nft_register_rule pid=97084 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153396.457:8685): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe0fcd94c0 a2=0 a3=7ffe0fcd94ac items=0 ppid=33621 pid=97084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153396.457:8685): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153412.406:8686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.414:8687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.478:8688): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.508:8689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.980:8690): prog-id=651 op=LOAD
type=BPF msg=audit(1739153412.981:8691): prog-id=652 op=LOAD
type=SYSCALL msg=audit(1739153412.981:8691): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c0003053a0 items=0 ppid=97269 pid=97282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.981:8691): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393962613865356565316465653963386536313162656563
type=BPF msg=audit(1739153412.981:8692): prog-id=653 op=LOAD
type=SYSCALL msg=audit(1739153412.981:8692): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0003053e8 items=0 ppid=97269 pid=97282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.981:8692): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393962613865356565316465653963386536313162656563
type=BPF msg=audit(1739153412.981:8693): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.981:8694): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.981:8695): prog-id=654 op=LOAD
type=SYSCALL msg=audit(1739153412.981:8695): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000305848 items=0 ppid=97269 pid=97282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.981:8695): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393962613865356565316465653963386536313162656563
type=BPF msg=audit(1739153412.993:8696): prog-id=655 op=LOAD
type=BPF msg=audit(1739153412.994:8697): prog-id=656 op=LOAD
type=SYSCALL msg=audit(1739153412.994:8697): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00035aa60 items=0 ppid=97286 pid=97303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.994:8697): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633539653564373739663661356437383830623533393030
type=BPF msg=audit(1739153412.994:8698): prog-id=657 op=LOAD
type=SYSCALL msg=audit(1739153412.994:8698): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00035aaa8 items=0 ppid=97286 pid=97303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.994:8698): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633539653564373739663661356437383830623533393030
type=BPF msg=audit(1739153412.994:8699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.994:8700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153412.994:8701): prog-id=658 op=LOAD
type=SYSCALL msg=audit(1739153412.994:8701): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00035af08 items=0 ppid=97286 pid=97303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153412.994:8701): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38633539653564373739663661356437383830623533393030
type=AVC msg=audit(1739153418.551:8702): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.144.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153418.551:8702): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153418.551:8702): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153418.940:8703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153419.161:8704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153426.476:8705): table=nat:1050 family=10 entries=14 op=nft_register_rule pid=97797 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153426.476:8705): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff695f9d20 a2=0 a3=7fff695f9d0c items=0 ppid=33621 pid=97797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153426.476:8705): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153426.477:8706): table=filter:1051 family=10 entries=20 op=nft_register_rule pid=97797 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153426.477:8706): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff695f9d20 a2=0 a3=7fff695f9d0c items=0 ppid=33621 pid=97797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153426.477:8706): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153426.527:8707): table=nat:1052 family=2 entries=18 op=nft_register_rule pid=97839 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153426.527:8707): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffa78cef40 a2=0 a3=7fffa78cef2c items=0 ppid=33621 pid=97839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153426.527:8707): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153426.527:8708): table=filter:1053 family=2 entries=20 op=nft_register_rule pid=97839 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153426.527:8708): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffa78cef40 a2=0 a3=7fffa78cef2c items=0 ppid=33621 pid=97839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153426.527:8708): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1739153429.430:8709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153430.252:8710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1739153433.340:8711): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.145.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153433.340:8711): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153433.340:8711): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153433.626:8712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153433.821:8713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153444.094:8714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153444.759:8715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153456.544:8716): table=nat:1054 family=10 entries=14 op=nft_register_rule pid=98312 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153456.544:8716): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdae8cdcb0 a2=0 a3=7ffdae8cdc9c items=0 ppid=33621 pid=98312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153456.544:8716): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153456.545:8717): table=filter:1055 family=10 entries=20 op=nft_register_rule pid=98312 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153456.545:8717): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdae8cdcb0 a2=0 a3=7ffdae8cdc9c items=0 ppid=33621 pid=98312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153456.545:8717): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153456.600:8718): table=nat:1056 family=2 entries=18 op=nft_register_rule pid=98358 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153456.600:8718): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffd584d0340 a2=0 a3=7ffd584d032c items=0 ppid=33621 pid=98358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153456.600:8718): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153456.600:8719): table=filter:1057 family=2 entries=20 op=nft_register_rule pid=98358 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153456.600:8719): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd584d0340 a2=0 a3=7ffd584d032c items=0 ppid=33621 pid=98358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153456.600:8719): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=AVC msg=audit(1739153477.465:8720): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.136.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153477.465:8720): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153477.465:8720): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153478.759:8721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153478.946:8722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153486.620:8723): table=nat:1058 family=10 entries=14 op=nft_register_rule pid=98842 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153486.620:8723): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd458e5fb0 a2=0 a3=7ffd458e5f9c items=0 ppid=33621 pid=98842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153486.620:8723): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153486.621:8724): table=filter:1059 family=10 entries=20 op=nft_register_rule pid=98842 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153486.621:8724): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd458e5fb0 a2=0 a3=7ffd458e5f9c items=0 ppid=33621 pid=98842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153486.621:8724): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153486.679:8725): table=nat:1060 family=2 entries=18 op=nft_register_rule pid=98888 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153486.679:8725): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe57f99f60 a2=0 a3=7ffe57f99f4c items=0 ppid=33621 pid=98888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153486.679:8725): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153486.679:8726): table=filter:1061 family=2 entries=20 op=nft_register_rule pid=98888 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153486.679:8726): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe57f99f60 a2=0 a3=7ffe57f99f4c items=0 ppid=33621 pid=98888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153486.679:8726): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153488.177:8727): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.183:8728): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.239:8729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.267:8730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.778:8731): prog-id=659 op=LOAD
type=BPF msg=audit(1739153488.779:8732): prog-id=660 op=LOAD
type=SYSCALL msg=audit(1739153488.779:8732): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000292f00 items=0 ppid=98998 pid=99008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.779:8732): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313631646334383062653230666638393261386236323932
type=BPF msg=audit(1739153488.779:8733): prog-id=661 op=LOAD
type=SYSCALL msg=audit(1739153488.779:8733): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000292f48 items=0 ppid=98998 pid=99008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.779:8733): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313631646334383062653230666638393261386236323932
type=BPF msg=audit(1739153488.779:8734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.779:8735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.779:8736): prog-id=662 op=LOAD
type=SYSCALL msg=audit(1739153488.779:8736): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002933a8 items=0 ppid=98998 pid=99008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.779:8736): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313631646334383062653230666638393261386236323932
type=BPF msg=audit(1739153488.799:8737): prog-id=663 op=LOAD
type=BPF msg=audit(1739153488.799:8738): prog-id=664 op=LOAD
type=SYSCALL msg=audit(1739153488.799:8738): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000298560 items=0 ppid=99024 pid=99037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.799:8738): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326431626131346364313532663636353237343264666436
type=BPF msg=audit(1739153488.799:8739): prog-id=665 op=LOAD
type=SYSCALL msg=audit(1739153488.799:8739): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002985a8 items=0 ppid=99024 pid=99037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.799:8739): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326431626131346364313532663636353237343264666436
type=BPF msg=audit(1739153488.799:8740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.799:8741): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153488.799:8742): prog-id=666 op=LOAD
type=SYSCALL msg=audit(1739153488.799:8742): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000298a08 items=0 ppid=99024 pid=99037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153488.799:8742): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62326431626131346364313532663636353237343264666436
type=SERVICE_STOP msg=audit(1739153489.218:8743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153489.889:8744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739153503.103:8745): prog-id=667 op=LOAD
type=SYSCALL msg=audit(1739153503.103:8745): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00027e9f0 items=0 ppid=99445 pid=99455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153503.103:8745): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353263396365323062383164373866323434666136303035
type=BPF msg=audit(1739153503.103:8746): prog-id=668 op=LOAD
type=SYSCALL msg=audit(1739153503.103:8746): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00027ea38 items=0 ppid=99445 pid=99455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153503.103:8746): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353263396365323062383164373866323434666136303035
type=BPF msg=audit(1739153503.103:8747): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153503.103:8748): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153503.103:8749): prog-id=669 op=LOAD
type=SYSCALL msg=audit(1739153503.103:8749): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00027eac8 items=0 ppid=99445 pid=99455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153503.103:8749): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353263396365323062383164373866323434666136303035
type=BPF msg=audit(1739153503.370:8750): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153516.701:8751): table=nat:1062 family=10 entries=14 op=nft_register_rule pid=99745 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153516.701:8751): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe8955afc0 a2=0 a3=7ffe8955afac items=0 ppid=33621 pid=99745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153516.701:8751): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153516.702:8752): table=filter:1063 family=10 entries=20 op=nft_register_rule pid=99745 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153516.702:8752): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe8955afc0 a2=0 a3=7ffe8955afac items=0 ppid=33621 pid=99745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153516.702:8752): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153516.759:8753): table=nat:1064 family=2 entries=18 op=nft_register_rule pid=99785 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153516.759:8753): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdfc98d5c0 a2=0 a3=7ffdfc98d5ac items=0 ppid=33621 pid=99785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153516.759:8753): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153516.759:8754): table=filter:1065 family=2 entries=20 op=nft_register_rule pid=99785 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153516.759:8754): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdfc98d5c0 a2=0 a3=7ffdfc98d5ac items=0 ppid=33621 pid=99785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153516.759:8754): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153546.768:8755): table=nat:1066 family=10 entries=14 op=nft_register_rule pid=100255 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153546.768:8755): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcebe05380 a2=0 a3=7ffcebe0536c items=0 ppid=33621 pid=100255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153546.768:8755): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153546.769:8756): table=filter:1067 family=10 entries=20 op=nft_register_rule pid=100255 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153546.769:8756): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcebe05380 a2=0 a3=7ffcebe0536c items=0 ppid=33621 pid=100255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153546.769:8756): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153546.832:8757): table=nat:1068 family=2 entries=18 op=nft_register_rule pid=100308 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153546.832:8757): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcaad488f0 a2=0 a3=7ffcaad488dc items=0 ppid=33621 pid=100308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153546.832:8757): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153546.832:8758): table=filter:1069 family=2 entries=20 op=nft_register_rule pid=100308 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153546.832:8758): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcaad488f0 a2=0 a3=7ffcaad488dc items=0 ppid=33621 pid=100308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153546.832:8758): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153563.959:8759): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153563.967:8760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.021:8761): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.047:8762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.641:8763): prog-id=670 op=LOAD
type=BPF msg=audit(1739153564.642:8764): prog-id=671 op=LOAD
type=SYSCALL msg=audit(1739153564.642:8764): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00021a620 items=0 ppid=100752 pid=100768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.642:8764): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36353761346164366464343462383031633430613632373234
type=BPF msg=audit(1739153564.642:8765): prog-id=672 op=LOAD
type=SYSCALL msg=audit(1739153564.642:8765): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00021a668 items=0 ppid=100752 pid=100768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.642:8765): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36353761346164366464343462383031633430613632373234
type=BPF msg=audit(1739153564.642:8766): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.642:8767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.642:8768): prog-id=673 op=LOAD
type=SYSCALL msg=audit(1739153564.642:8768): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00021aac8 items=0 ppid=100752 pid=100768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.642:8768): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36353761346164366464343462383031633430613632373234
type=BPF msg=audit(1739153564.643:8769): prog-id=674 op=LOAD
type=BPF msg=audit(1739153564.643:8770): prog-id=675 op=LOAD
type=SYSCALL msg=audit(1739153564.643:8770): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bb9d8 a2=78 a3=c0003de810 items=0 ppid=100735 pid=100753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.643:8770): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64626566393932393036666535326663616438356333373937
type=BPF msg=audit(1739153564.643:8771): prog-id=676 op=LOAD
type=SYSCALL msg=audit(1739153564.643:8771): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bb770 a2=78 a3=c0003de858 items=0 ppid=100735 pid=100753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.643:8771): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64626566393932393036666535326663616438356333373937
type=BPF msg=audit(1739153564.643:8772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.643:8773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153564.643:8774): prog-id=677 op=LOAD
type=SYSCALL msg=audit(1739153564.643:8774): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bbc30 a2=78 a3=c0003decb8 items=0 ppid=100735 pid=100753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153564.643:8774): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64626566393932393036666535326663616438356333373937
type=NETFILTER_CFG msg=audit(1739153576.840:8775): table=nat:1070 family=10 entries=14 op=nft_register_rule pid=100973 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153576.840:8775): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe1fa89100 a2=0 a3=7ffe1fa890ec items=0 ppid=33621 pid=100973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153576.840:8775): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153576.841:8776): table=filter:1071 family=10 entries=20 op=nft_register_rule pid=100973 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153576.841:8776): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe1fa89100 a2=0 a3=7ffe1fa890ec items=0 ppid=33621 pid=100973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153576.841:8776): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153576.913:8777): table=nat:1072 family=2 entries=18 op=nft_register_rule pid=101026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153576.913:8777): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc1b669100 a2=0 a3=7ffc1b6690ec items=0 ppid=33621 pid=101026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153576.913:8777): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153576.914:8778): table=filter:1073 family=2 entries=20 op=nft_register_rule pid=101026 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153576.914:8778): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc1b669100 a2=0 a3=7ffc1b6690ec items=0 ppid=33621 pid=101026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153576.914:8778): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153580.086:8779): prog-id=678 op=LOAD
type=BPF msg=audit(1739153580.087:8780): prog-id=679 op=LOAD
type=SYSCALL msg=audit(1739153580.087:8780): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001b99d8 a2=78 a3=c000099050 items=0 ppid=101043 pid=101053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153580.087:8780): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373434363364613733313438363439336131633962396164
type=BPF msg=audit(1739153580.087:8781): prog-id=680 op=LOAD
type=SYSCALL msg=audit(1739153580.087:8781): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001b9770 a2=78 a3=c000099098 items=0 ppid=101043 pid=101053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153580.087:8781): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373434363364613733313438363439336131633962396164
type=BPF msg=audit(1739153580.087:8782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153580.087:8783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153580.087:8784): prog-id=681 op=LOAD
type=SYSCALL msg=audit(1739153580.087:8784): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001b9c30 a2=78 a3=c0000994f8 items=0 ppid=101043 pid=101053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153580.087:8784): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373434363364613733313438363439336131633962396164
type=NETFILTER_CFG msg=audit(1739153606.914:8785): table=nat:1074 family=10 entries=14 op=nft_register_rule pid=101645 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153606.914:8785): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd95617c10 a2=0 a3=7ffd95617bfc items=0 ppid=33621 pid=101645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153606.914:8785): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153606.915:8786): table=filter:1075 family=10 entries=20 op=nft_register_rule pid=101645 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153606.915:8786): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd95617c10 a2=0 a3=7ffd95617bfc items=0 ppid=33621 pid=101645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153606.915:8786): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153606.984:8787): table=nat:1076 family=2 entries=18 op=nft_register_rule pid=101698 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153606.984:8787): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe5925aa40 a2=0 a3=7ffe5925aa2c items=0 ppid=33621 pid=101698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153606.984:8787): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153606.984:8788): table=filter:1077 family=2 entries=20 op=nft_register_rule pid=101698 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153606.984:8788): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe5925aa40 a2=0 a3=7ffe5925aa2c items=0 ppid=33621 pid=101698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153606.984:8788): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153608.109:8789): prog-id=682 op=LOAD
type=BPF msg=audit(1739153608.110:8790): prog-id=683 op=LOAD
type=SYSCALL msg=audit(1739153608.110:8790): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001439d8 a2=78 a3=c000299050 items=0 ppid=101712 pid=101722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153608.110:8790): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65366139336636313861393435366461396436353233383963
type=BPF msg=audit(1739153608.110:8791): prog-id=684 op=LOAD
type=SYSCALL msg=audit(1739153608.110:8791): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000143770 a2=78 a3=c000299098 items=0 ppid=101712 pid=101722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153608.110:8791): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65366139336636313861393435366461396436353233383963
type=BPF msg=audit(1739153608.110:8792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153608.110:8793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153608.110:8794): prog-id=685 op=LOAD
type=SYSCALL msg=audit(1739153608.110:8794): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000143c30 a2=78 a3=c0002994f8 items=0 ppid=101712 pid=101722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153608.110:8794): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65366139336636313861393435366461396436353233383963
type=NETFILTER_CFG msg=audit(1739153636.982:8795): table=nat:1078 family=10 entries=14 op=nft_register_rule pid=102387 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153636.982:8795): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe7a9e9df0 a2=0 a3=7ffe7a9e9ddc items=0 ppid=33621 pid=102387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153636.982:8795): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153636.982:8796): table=filter:1079 family=10 entries=20 op=nft_register_rule pid=102387 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153636.982:8796): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe7a9e9df0 a2=0 a3=7ffe7a9e9ddc items=0 ppid=33621 pid=102387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153636.982:8796): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153637.062:8797): table=nat:1080 family=2 entries=18 op=nft_register_rule pid=102442 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153637.062:8797): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdb8d21c60 a2=0 a3=7ffdb8d21c4c items=0 ppid=33621 pid=102442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153637.062:8797): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153637.063:8798): table=filter:1081 family=2 entries=20 op=nft_register_rule pid=102442 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153637.063:8798): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdb8d21c60 a2=0 a3=7ffdb8d21c4c items=0 ppid=33621 pid=102442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153637.063:8798): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153639.814:8799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153639.829:8800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.233:8801): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.247:8802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.259:8803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.305:8804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.514:8805): prog-id=686 op=LOAD
type=BPF msg=audit(1739153640.515:8806): prog-id=687 op=LOAD
type=SYSCALL msg=audit(1739153640.515:8806): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003daa30 items=0 ppid=102593 pid=102603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.515:8806): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653333653737396165613863353161376639333833363030
type=BPF msg=audit(1739153640.515:8807): prog-id=688 op=LOAD
type=SYSCALL msg=audit(1739153640.515:8807): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003daa78 items=0 ppid=102593 pid=102603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.515:8807): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653333653737396165613863353161376639333833363030
type=BPF msg=audit(1739153640.515:8808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.515:8809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.515:8810): prog-id=689 op=LOAD
type=SYSCALL msg=audit(1739153640.515:8810): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003daed8 items=0 ppid=102593 pid=102603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.515:8810): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653333653737396165613863353161376639333833363030
type=BPF msg=audit(1739153640.542:8811): prog-id=690 op=LOAD
type=BPF msg=audit(1739153640.542:8812): prog-id=691 op=LOAD
type=SYSCALL msg=audit(1739153640.542:8812): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c39d8 a2=78 a3=c000025170 items=0 ppid=102628 pid=102641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.542:8812): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313738303939393162646531623561373266613731353832
type=BPF msg=audit(1739153640.542:8813): prog-id=692 op=LOAD
type=SYSCALL msg=audit(1739153640.542:8813): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c3770 a2=78 a3=c0000251b8 items=0 ppid=102628 pid=102641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.542:8813): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313738303939393162646531623561373266613731353832
type=BPF msg=audit(1739153640.542:8814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.542:8815): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153640.542:8816): prog-id=693 op=LOAD
type=SYSCALL msg=audit(1739153640.542:8816): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c3c30 a2=78 a3=c000025618 items=0 ppid=102628 pid=102641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153640.542:8816): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313738303939393162646531623561373266613731353832
type=NETFILTER_CFG msg=audit(1739153667.070:8817): table=nat:1082 family=10 entries=14 op=nft_register_rule pid=103234 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153667.070:8817): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffdcff3cf80 a2=0 a3=7ffdcff3cf6c items=0 ppid=33621 pid=103234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153667.070:8817): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153667.071:8818): table=filter:1083 family=10 entries=20 op=nft_register_rule pid=103234 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153667.071:8818): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcff3cf80 a2=0 a3=7ffdcff3cf6c items=0 ppid=33621 pid=103234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153667.071:8818): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153667.132:8819): table=nat:1084 family=2 entries=18 op=nft_register_rule pid=103286 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153667.132:8819): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcc990c050 a2=0 a3=7ffcc990c03c items=0 ppid=33621 pid=103286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153667.132:8819): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153667.133:8820): table=filter:1085 family=2 entries=20 op=nft_register_rule pid=103286 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153667.133:8820): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcc990c050 a2=0 a3=7ffcc990c03c items=0 ppid=33621 pid=103286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153667.133:8820): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153668.311:8821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153668.321:8822): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153697.143:8823): table=nat:1086 family=10 entries=14 op=nft_register_rule pid=103746 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153697.143:8823): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff44206420 a2=0 a3=7fff4420640c items=0 ppid=33621 pid=103746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153697.143:8823): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153697.144:8824): table=filter:1087 family=10 entries=20 op=nft_register_rule pid=103746 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153697.144:8824): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff44206420 a2=0 a3=7fff4420640c items=0 ppid=33621 pid=103746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153697.144:8824): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153697.209:8825): table=nat:1088 family=2 entries=18 op=nft_register_rule pid=103799 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153697.209:8825): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcc4047740 a2=0 a3=7ffcc404772c items=0 ppid=33621 pid=103799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153697.209:8825): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153697.209:8826): table=filter:1089 family=2 entries=20 op=nft_register_rule pid=103799 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153697.209:8826): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcc4047740 a2=0 a3=7ffcc404772c items=0 ppid=33621 pid=103799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153697.209:8826): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153715.680:8827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153715.700:8828): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153715.747:8829): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153715.778:8830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153716.373:8831): prog-id=694 op=LOAD
type=BPF msg=audit(1739153716.373:8832): prog-id=695 op=LOAD
type=SYSCALL msg=audit(1739153716.373:8832): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000286ba0 items=0 ppid=104074 pid=104096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.373:8832): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31333933386234663431346434663661363839333639346234
type=BPF msg=audit(1739153716.373:8833): prog-id=696 op=LOAD
type=SYSCALL msg=audit(1739153716.373:8833): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000286be8 items=0 ppid=104074 pid=104096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.373:8833): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31333933386234663431346434663661363839333639346234
type=BPF msg=audit(1739153716.373:8834): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153716.373:8835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153716.373:8836): prog-id=697 op=LOAD
type=SYSCALL msg=audit(1739153716.373:8836): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000287048 items=0 ppid=104074 pid=104096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.373:8836): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31333933386234663431346434663661363839333639346234
type=BPF msg=audit(1739153716.375:8837): prog-id=698 op=LOAD
type=BPF msg=audit(1739153716.375:8838): prog-id=699 op=LOAD
type=SYSCALL msg=audit(1739153716.375:8838): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c00031aaf0 items=0 ppid=104081 pid=104100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.375:8838): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61666565353233376637623566333666663766616561626139
type=BPF msg=audit(1739153716.375:8839): prog-id=700 op=LOAD
type=SYSCALL msg=audit(1739153716.375:8839): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c00031ab38 items=0 ppid=104081 pid=104100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.375:8839): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61666565353233376637623566333666663766616561626139
type=BPF msg=audit(1739153716.375:8840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153716.375:8841): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153716.375:8842): prog-id=701 op=LOAD
type=SYSCALL msg=audit(1739153716.375:8842): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c00031af98 items=0 ppid=104081 pid=104100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153716.375:8842): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61666565353233376637623566333666663766616561626139
type=AVC msg=audit(1739153718.889:8843): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.152.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153718.889:8843): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153718.889:8843): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153720.256:8844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153720.458:8845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@10 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153727.209:8846): table=nat:1090 family=10 entries=14 op=nft_register_rule pid=104516 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153727.209:8846): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe548051e0 a2=0 a3=7ffe548051cc items=0 ppid=33621 pid=104516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153727.209:8846): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153727.210:8847): table=filter:1091 family=10 entries=20 op=nft_register_rule pid=104516 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153727.210:8847): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe548051e0 a2=0 a3=7ffe548051cc items=0 ppid=33621 pid=104516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153727.210:8847): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153727.275:8848): table=nat:1092 family=2 entries=18 op=nft_register_rule pid=104569 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153727.275:8848): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffcb54a8630 a2=0 a3=7ffcb54a861c items=0 ppid=33621 pid=104569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153727.275:8848): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153727.276:8849): table=filter:1093 family=2 entries=20 op=nft_register_rule pid=104569 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153727.276:8849): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcb54a8630 a2=0 a3=7ffcb54a861c items=0 ppid=33621 pid=104569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153727.276:8849): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1739153730.725:8850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@10 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153731.479:8851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1739153733.290:8852): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.153.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153733.290:8852): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153733.290:8852): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153733.568:8853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153733.763:8854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@11 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153744.027:8855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@11 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153744.692:8856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153757.303:8857): table=nat:1094 family=10 entries=14 op=nft_register_rule pid=105044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153757.303:8857): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc3f1a33d0 a2=0 a3=7ffc3f1a33bc items=0 ppid=33621 pid=105044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153757.303:8857): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153757.304:8858): table=filter:1095 family=10 entries=20 op=nft_register_rule pid=105044 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153757.304:8858): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc3f1a33d0 a2=0 a3=7ffc3f1a33bc items=0 ppid=33621 pid=105044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153757.304:8858): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153757.353:8859): table=nat:1096 family=2 entries=18 op=nft_register_rule pid=105086 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153757.353:8859): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc926119f0 a2=0 a3=7ffc926119dc items=0 ppid=33621 pid=105086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153757.353:8859): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153757.354:8860): table=filter:1097 family=2 entries=20 op=nft_register_rule pid=105086 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153757.354:8860): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc926119f0 a2=0 a3=7ffc926119dc items=0 ppid=33621 pid=105086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153757.354:8860): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153787.373:8861): table=nat:1098 family=10 entries=14 op=nft_register_rule pid=105550 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153787.373:8861): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd8b5a41d0 a2=0 a3=7ffd8b5a41bc items=0 ppid=33621 pid=105550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153787.373:8861): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153787.374:8862): table=filter:1099 family=10 entries=20 op=nft_register_rule pid=105550 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153787.374:8862): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd8b5a41d0 a2=0 a3=7ffd8b5a41bc items=0 ppid=33621 pid=105550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153787.374:8862): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153787.430:8863): table=nat:1100 family=2 entries=18 op=nft_register_rule pid=105595 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153787.430:8863): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fffc4e08e90 a2=0 a3=7fffc4e08e7c items=0 ppid=33621 pid=105595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153787.430:8863): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153787.430:8864): table=filter:1101 family=2 entries=20 op=nft_register_rule pid=105595 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153787.430:8864): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fffc4e08e90 a2=0 a3=7fffc4e08e7c items=0 ppid=33621 pid=105595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153787.430:8864): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=AVC msg=audit(1739153790.044:8865): avc:  denied  { sendto } for  pid=742 comm="chronyd" path="/run/chrony/chronyc.142.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:spc_t:s0 tclass=unix_dgram_socket permissive=1
type=SYSCALL msg=audit(1739153790.044:8865): arch=c000003e syscall=46 success=yes exit=32 a0=7 a1=7ffc05238710 a2=0 a3=7f699f3b13e0 items=0 ppid=1 pid=742 auid=4294967295 uid=993 gid=990 euid=993 suid=993 fsuid=993 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="chronyd" exe="/usr/sbin/chronyd" subj=system_u:system_r:chronyd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="chrony" GID="chrony" EUID="chrony" SUID="chrony" FSUID="chrony" EGID="chrony" SGID="chrony" FSGID="chrony"
type=PROCTITLE msg=audit(1739153790.044:8865): proctitle=2F7573722F7362696E2F6368726F6E7964002D460032
type=SERVICE_START msg=audit(1739153790.317:8866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1739153790.517:8867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@12 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739153791.758:8868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153791.764:8869): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153791.830:8870): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153791.854:8871): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153792.233:8872): prog-id=702 op=LOAD
type=BPF msg=audit(1739153792.235:8873): prog-id=703 op=LOAD
type=SYSCALL msg=audit(1739153792.235:8873): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028f870 items=0 ppid=105906 pid=105917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.235:8873): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313239626535646234663664633666626539663133646530
type=BPF msg=audit(1739153792.235:8874): prog-id=704 op=LOAD
type=SYSCALL msg=audit(1739153792.235:8874): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028f8b8 items=0 ppid=105906 pid=105917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.235:8874): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313239626535646234663664633666626539663133646530
type=BPF msg=audit(1739153792.236:8875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153792.236:8876): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153792.236:8877): prog-id=705 op=LOAD
type=SYSCALL msg=audit(1739153792.236:8877): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028fd18 items=0 ppid=105906 pid=105917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.236:8877): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61313239626535646234663664633666626539663133646530
type=BPF msg=audit(1739153792.253:8878): prog-id=706 op=LOAD
type=BPF msg=audit(1739153792.257:8879): prog-id=707 op=LOAD
type=SYSCALL msg=audit(1739153792.257:8879): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c0002b2380 items=0 ppid=105935 pid=105946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.257:8879): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353931646632303365346164353839636135613162346133
type=BPF msg=audit(1739153792.257:8880): prog-id=708 op=LOAD
type=SYSCALL msg=audit(1739153792.257:8880): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0002b23c8 items=0 ppid=105935 pid=105946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.257:8880): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353931646632303365346164353839636135613162346133
type=BPF msg=audit(1739153792.257:8881): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153792.257:8882): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153792.257:8883): prog-id=709 op=LOAD
type=SYSCALL msg=audit(1739153792.257:8883): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c0002b2828 items=0 ppid=105935 pid=105946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153792.257:8883): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31353931646632303365346164353839636135613162346133
type=SERVICE_STOP msg=audit(1739153800.787:8884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@12 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153801.457:8885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1739153814.098:8886): prog-id=710 op=LOAD
type=SYSCALL msg=audit(1739153814.098:8886): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00038a110 items=0 ppid=106240 pid=106250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153814.098:8886): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396431316437333434653964636136623533623235363764
type=BPF msg=audit(1739153814.098:8887): prog-id=711 op=LOAD
type=SYSCALL msg=audit(1739153814.098:8887): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00038a158 items=0 ppid=106240 pid=106250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153814.098:8887): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396431316437333434653964636136623533623235363764
type=BPF msg=audit(1739153814.098:8888): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153814.098:8889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153814.098:8890): prog-id=712 op=LOAD
type=SYSCALL msg=audit(1739153814.098:8890): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00038a1e8 items=0 ppid=106240 pid=106250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153814.098:8890): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30396431316437333434653964636136623533623235363764
type=BPF msg=audit(1739153814.349:8891): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1739153817.454:8892): table=nat:1102 family=10 entries=14 op=nft_register_rule pid=106464 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153817.454:8892): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcf7ffadf0 a2=0 a3=7ffcf7ffaddc items=0 ppid=33621 pid=106464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153817.454:8892): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153817.455:8893): table=filter:1103 family=10 entries=20 op=nft_register_rule pid=106464 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153817.455:8893): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcf7ffadf0 a2=0 a3=7ffcf7ffaddc items=0 ppid=33621 pid=106464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153817.455:8893): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153817.506:8894): table=nat:1104 family=2 entries=18 op=nft_register_rule pid=106506 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153817.506:8894): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc4a353830 a2=0 a3=7ffc4a35381c items=0 ppid=33621 pid=106506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153817.506:8894): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153817.507:8895): table=filter:1105 family=2 entries=20 op=nft_register_rule pid=106506 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153817.507:8895): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc4a353830 a2=0 a3=7ffc4a35381c items=0 ppid=33621 pid=106506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153817.507:8895): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153847.527:8896): table=nat:1106 family=10 entries=14 op=nft_register_rule pid=106993 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153847.527:8896): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc1cfb1eb0 a2=0 a3=7ffc1cfb1e9c items=0 ppid=33621 pid=106993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153847.527:8896): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153847.528:8897): table=filter:1107 family=10 entries=20 op=nft_register_rule pid=106993 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153847.528:8897): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc1cfb1eb0 a2=0 a3=7ffc1cfb1e9c items=0 ppid=33621 pid=106993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153847.528:8897): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153847.577:8898): table=nat:1108 family=2 entries=18 op=nft_register_rule pid=107033 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153847.577:8898): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdfed490d0 a2=0 a3=7ffdfed490bc items=0 ppid=33621 pid=107033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153847.577:8898): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153847.577:8899): table=filter:1109 family=2 entries=20 op=nft_register_rule pid=107033 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153847.577:8899): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdfed490d0 a2=0 a3=7ffdfed490bc items=0 ppid=33621 pid=107033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153847.577:8899): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153867.464:8900): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153867.471:8901): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153867.535:8902): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153867.575:8903): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153868.100:8904): prog-id=713 op=LOAD
type=BPF msg=audit(1739153868.101:8905): prog-id=714 op=LOAD
type=SYSCALL msg=audit(1739153868.101:8905): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000024940 items=0 ppid=107490 pid=107513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.101:8905): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66623934336264333935346439366232363466396264623964
type=BPF msg=audit(1739153868.101:8906): prog-id=715 op=LOAD
type=SYSCALL msg=audit(1739153868.101:8906): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000024988 items=0 ppid=107490 pid=107513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.101:8906): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66623934336264333935346439366232363466396264623964
type=BPF msg=audit(1739153868.101:8907): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153868.101:8908): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153868.101:8909): prog-id=716 op=LOAD
type=SYSCALL msg=audit(1739153868.101:8909): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000024de8 items=0 ppid=107490 pid=107513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.101:8909): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66623934336264333935346439366232363466396264623964
type=BPF msg=audit(1739153868.103:8910): prog-id=717 op=LOAD
type=BPF msg=audit(1739153868.103:8911): prog-id=718 op=LOAD
type=SYSCALL msg=audit(1739153868.103:8911): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000218fd0 items=0 ppid=107498 pid=107515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.103:8911): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33636239353531373439393732653734303366326165646666
type=BPF msg=audit(1739153868.103:8912): prog-id=719 op=LOAD
type=SYSCALL msg=audit(1739153868.103:8912): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000219018 items=0 ppid=107498 pid=107515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.103:8912): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33636239353531373439393732653734303366326165646666
type=BPF msg=audit(1739153868.103:8913): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153868.103:8914): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153868.103:8915): prog-id=720 op=LOAD
type=SYSCALL msg=audit(1739153868.103:8915): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000219478 items=0 ppid=107498 pid=107515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153868.103:8915): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33636239353531373439393732653734303366326165646666
type=NETFILTER_CFG msg=audit(1739153877.593:8916): table=nat:1110 family=10 entries=14 op=nft_register_rule pid=107715 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153877.593:8916): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffc1aa2d440 a2=0 a3=7ffc1aa2d42c items=0 ppid=33621 pid=107715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153877.593:8916): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153877.594:8917): table=filter:1111 family=10 entries=20 op=nft_register_rule pid=107715 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153877.594:8917): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc1aa2d440 a2=0 a3=7ffc1aa2d42c items=0 ppid=33621 pid=107715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153877.594:8917): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153877.653:8918): table=nat:1112 family=2 entries=18 op=nft_register_rule pid=107760 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153877.653:8918): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffe5a5000f0 a2=0 a3=7ffe5a5000dc items=0 ppid=33621 pid=107760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153877.653:8918): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153877.653:8919): table=filter:1113 family=2 entries=20 op=nft_register_rule pid=107760 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153877.653:8919): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe5a5000f0 a2=0 a3=7ffe5a5000dc items=0 ppid=33621 pid=107760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153877.653:8919): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153907.666:8920): table=nat:1114 family=10 entries=14 op=nft_register_rule pid=108225 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153907.666:8920): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7fff798f6310 a2=0 a3=7fff798f62fc items=0 ppid=33621 pid=108225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153907.666:8920): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153907.667:8921): table=filter:1115 family=10 entries=20 op=nft_register_rule pid=108225 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153907.667:8921): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff798f6310 a2=0 a3=7fff798f62fc items=0 ppid=33621 pid=108225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153907.667:8921): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153907.727:8922): table=nat:1116 family=2 entries=18 op=nft_register_rule pid=108273 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153907.727:8922): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffc16bf5420 a2=0 a3=7ffc16bf540c items=0 ppid=33621 pid=108273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153907.727:8922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153907.728:8923): table=filter:1117 family=2 entries=20 op=nft_register_rule pid=108273 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153907.728:8923): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffc16bf5420 a2=0 a3=7ffc16bf540c items=0 ppid=33621 pid=108273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153907.728:8923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153937.738:8924): table=nat:1118 family=10 entries=14 op=nft_register_rule pid=108719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153937.738:8924): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffcef6ea8f0 a2=0 a3=7ffcef6ea8dc items=0 ppid=33621 pid=108719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153937.738:8924): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153937.739:8925): table=filter:1119 family=10 entries=20 op=nft_register_rule pid=108719 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153937.739:8925): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffcef6ea8f0 a2=0 a3=7ffcef6ea8dc items=0 ppid=33621 pid=108719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153937.739:8925): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153937.803:8926): table=nat:1120 family=2 entries=18 op=nft_register_rule pid=108770 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153937.803:8926): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff01ec04c0 a2=0 a3=7fff01ec04ac items=0 ppid=33621 pid=108770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153937.803:8926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153937.804:8927): table=filter:1121 family=2 entries=20 op=nft_register_rule pid=108770 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153937.804:8927): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff01ec04c0 a2=0 a3=7fff01ec04ac items=0 ppid=33621 pid=108770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153937.804:8927): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153943.270:8928): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.296:8929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.331:8930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.368:8931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.909:8932): prog-id=721 op=LOAD
type=BPF msg=audit(1739153943.910:8933): prog-id=722 op=LOAD
type=SYSCALL msg=audit(1739153943.910:8933): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c00020ad80 items=0 ppid=108911 pid=108921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.910:8933): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353434323562663531346566363635306463363032336461
type=BPF msg=audit(1739153943.910:8934): prog-id=723 op=LOAD
type=SYSCALL msg=audit(1739153943.910:8934): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c00020adc8 items=0 ppid=108911 pid=108921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.910:8934): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353434323562663531346566363635306463363032336461
type=BPF msg=audit(1739153943.910:8935): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.910:8936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.910:8937): prog-id=724 op=LOAD
type=SYSCALL msg=audit(1739153943.910:8937): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c00020b228 items=0 ppid=108911 pid=108921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.910:8937): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353434323562663531346566363635306463363032336461
type=BPF msg=audit(1739153943.923:8938): prog-id=725 op=LOAD
type=BPF msg=audit(1739153943.924:8939): prog-id=726 op=LOAD
type=SYSCALL msg=audit(1739153943.924:8939): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030b1c0 items=0 ppid=108937 pid=108948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.924:8939): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633037363438343239643635343532343765333733613538
type=BPF msg=audit(1739153943.924:8940): prog-id=727 op=LOAD
type=SYSCALL msg=audit(1739153943.924:8940): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030b208 items=0 ppid=108937 pid=108948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.924:8940): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633037363438343239643635343532343765333733613538
type=BPF msg=audit(1739153943.924:8941): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.924:8942): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153943.924:8943): prog-id=728 op=LOAD
type=SYSCALL msg=audit(1739153943.924:8943): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030b668 items=0 ppid=108937 pid=108948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153943.924:8943): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633037363438343239643635343532343765333733613538
type=BPF msg=audit(1739153948.090:8944): prog-id=729 op=LOAD
type=BPF msg=audit(1739153948.090:8945): prog-id=730 op=LOAD
type=SYSCALL msg=audit(1739153948.090:8945): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001b79d8 a2=78 a3=c000025b60 items=0 ppid=109049 pid=109059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153948.090:8945): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61346235313739303537373033373734303665343663383762
type=BPF msg=audit(1739153948.091:8946): prog-id=731 op=LOAD
type=SYSCALL msg=audit(1739153948.091:8946): arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001b7770 a2=78 a3=c000025ba8 items=0 ppid=109049 pid=109059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153948.091:8946): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61346235313739303537373033373734303665343663383762
type=BPF msg=audit(1739153948.091:8947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153948.091:8948): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153948.091:8949): prog-id=732 op=LOAD
type=SYSCALL msg=audit(1739153948.091:8949): arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001b7c30 a2=78 a3=c0002f2008 items=0 ppid=109049 pid=109059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153948.091:8949): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61346235313739303537373033373734303665343663383762
type=NETFILTER_CFG msg=audit(1739153967.813:8950): table=nat:1122 family=10 entries=14 op=nft_register_rule pid=109594 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153967.813:8950): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffe98c1db70 a2=0 a3=7ffe98c1db5c items=0 ppid=33621 pid=109594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153967.813:8950): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153967.814:8951): table=filter:1123 family=10 entries=20 op=nft_register_rule pid=109594 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153967.814:8951): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffe98c1db70 a2=0 a3=7ffe98c1db5c items=0 ppid=33621 pid=109594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153967.814:8951): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153967.880:8952): table=nat:1124 family=2 entries=18 op=nft_register_rule pid=109646 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153967.880:8952): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7fff57904c50 a2=0 a3=7fff57904c3c items=0 ppid=33621 pid=109646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153967.880:8952): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153967.881:8953): table=filter:1125 family=2 entries=20 op=nft_register_rule pid=109646 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153967.881:8953): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7fff57904c50 a2=0 a3=7fff57904c3c items=0 ppid=33621 pid=109646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153967.881:8953): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1739153976.103:8954): prog-id=733 op=LOAD
type=BPF msg=audit(1739153976.103:8955): prog-id=734 op=LOAD
type=SYSCALL msg=audit(1739153976.103:8955): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000219bc0 items=0 ppid=109969 pid=109978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153976.103:8955): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63656262643231373237366466633762663464303761316338
type=BPF msg=audit(1739153976.103:8956): prog-id=735 op=LOAD
type=SYSCALL msg=audit(1739153976.103:8956): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c000219c08 items=0 ppid=109969 pid=109978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153976.103:8956): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63656262643231373237366466633762663464303761316338
type=BPF msg=audit(1739153976.103:8957): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153976.103:8958): prog-id=0 op=UNLOAD
type=BPF msg=audit(1739153976.103:8959): prog-id=736 op=LOAD
type=SYSCALL msg=audit(1739153976.103:8959): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000422068 items=0 ppid=109969 pid=109978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153976.103:8959): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63656262643231373237366466633762663464303761316338
type=USER_END msg=audit(1739153979.361:8960): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739153979.361:8961): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739153979.361:8962): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58657 suid=1000 rport=57578 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739153979.362:8963): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58657 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739153979.365:8964): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739153979.366:8965): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739153979.367:8966): pid=58654 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=58654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1739153989.460:8967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1739153989.482:8968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1739153997.878:8969): table=nat:1126 family=10 entries=14 op=nft_register_rule pid=110354 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153997.878:8969): arch=c000003e syscall=46 success=yes exit=2072 a0=3 a1=7ffd32f071d0 a2=0 a3=7ffd32f071bc items=0 ppid=33621 pid=110354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153997.878:8969): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153997.879:8970): table=filter:1127 family=10 entries=20 op=nft_register_rule pid=110354 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1739153997.879:8970): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffd32f071d0 a2=0 a3=7ffd32f071bc items=0 ppid=33621 pid=110354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153997.879:8970): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153997.948:8971): table=nat:1128 family=2 entries=18 op=nft_register_rule pid=110407 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153997.948:8971): arch=c000003e syscall=46 success=yes exit=3032 a0=3 a1=7ffdcd62beb0 a2=0 a3=7ffdcd62be9c items=0 ppid=33621 pid=110407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153997.948:8971): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1739153997.948:8972): table=filter:1129 family=2 entries=20 op=nft_register_rule pid=110407 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1739153997.948:8972): arch=c000003e syscall=46 success=yes exit=4056 a0=3 a1=7ffdcd62beb0 a2=0 a3=7ffdcd62be9c items=0 ppid=33621 pid=110407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739153997.948:8972): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1739154003.418:8973): pid=110441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154003.420:8974): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110441 suid=74 rport=59850 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154003.420:8975): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110441 suid=74 rport=59850 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154003.482:8976): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154003.482:8977): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154003.512:8978): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154003.512:8979): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110441 suid=74 rport=59850 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154003.514:8980): pid=110440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154003.514:8981): pid=110440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154003.514:8981): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc274144c0 a2=4 a3=3e8 items=0 ppid=10335 pid=110440 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154003.514:8981): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154003.517:8982): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739154003.547:8983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154003.589:8984): pid=110444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1739154003.589:8985): pid=110444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1739154003.589:8986): pid=110444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154003.589:8987): pid=110444 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154003.589:8987): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc8c4ef370 a2=4 a3=3e8 items=0 ppid=1 pid=110444 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154003.589:8987): proctitle="(systemd)"
type=USER_START msg=audit(1739154003.591:8988): pid=110444 uid=0 auid=1000 ses=32 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1739154003.760:8989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1739154003.774:8990): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154003.775:8991): pid=110460 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154003.776:8992): pid=110460 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154003.820:8993): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154003.820:8994): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154003.821:8995): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154003.867:8996): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110460 suid=1000 rport=59850 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154003.868:8997): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154003.869:8998): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739154003.869:8999): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1739154003.870:9000): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739154003.870:9001): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154003.870:9002): pid=110440 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739154003.893:9003): pid=110475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110475 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154003.894:9004): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110475 suid=74 rport=59852 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154003.894:9005): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110475 suid=74 rport=59852 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154003.955:9006): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154003.955:9007): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154003.986:9008): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154003.986:9009): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110475 suid=74 rport=59852 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154003.988:9010): pid=110474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154003.988:9011): pid=110474 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154003.988:9011): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd199632b0 a2=4 a3=3e8 items=0 ppid=10335 pid=110474 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154003.988:9011): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154003.989:9012): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154004.005:9013): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.006:9014): pid=110477 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154004.006:9015): pid=110477 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154004.048:9016): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154004.048:9017): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.049:9018): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154004.354:9019): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739154004.354:9020): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.355:9021): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110477 suid=1000 rport=59852 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.355:9022): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154004.356:9023): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739154004.356:9024): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.357:9025): pid=110474 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739154004.370:9026): pid=110493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154004.370:9027): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110493 suid=74 rport=59854 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154004.370:9028): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=110493 suid=74 rport=59854 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154004.432:9029): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154004.432:9030): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154004.462:9031): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154004.463:9032): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110493 suid=74 rport=59854 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154004.464:9033): pid=110492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154004.464:9034): pid=110492 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154004.464:9034): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffde87e8ac0 a2=4 a3=3e8 items=0 ppid=10335 pid=110492 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154004.464:9034): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154004.465:9035): pid=110492 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154004.479:9036): pid=110492 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.480:9037): pid=110495 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154004.481:9038): pid=110495 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154004.524:9039): pid=110492 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154004.524:9040): pid=110492 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.525:9041): pid=110492 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.632:9042): pid=110582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154004.633:9043): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110582 suid=74 rport=60046 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154004.633:9044): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110582 suid=74 rport=60046 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1739154004.795:9045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1739154004.824:9046): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154004.824:9047): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154004.857:9048): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154004.857:9049): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110582 suid=74 rport=60046 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154004.859:9050): pid=110581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154004.859:9051): pid=110581 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=35 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154004.859:9051): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdf85ba3c0 a2=4 a3=3e8 items=0 ppid=10335 pid=110581 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154004.859:9051): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154004.860:9052): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154004.875:9053): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.876:9054): pid=110586 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154004.877:9055): pid=110586 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154004.918:9056): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154004.918:9057): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.919:9058): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154004.940:9059): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739154004.940:9060): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.940:9061): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110586 suid=1000 rport=60046 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.941:9062): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154004.942:9063): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739154004.942:9064): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154004.942:9065): pid=110581 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739154004.963:9066): pid=110603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154004.964:9067): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110603 suid=74 rport=49348 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154004.964:9068): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110603 suid=74 rport=49348 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154005.042:9069): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.042:9070): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154005.073:9071): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.073:9072): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110603 suid=74 rport=49348 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154005.075:9073): pid=110602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154005.075:9074): pid=110602 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=36 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154005.075:9074): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe5439efb0 a2=4 a3=3e8 items=0 ppid=10335 pid=110602 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154005.075:9074): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154005.075:9075): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154005.089:9076): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.090:9077): pid=110605 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154005.090:9078): pid=110605 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154005.133:9079): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154005.133:9080): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.134:9081): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154005.158:9082): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739154005.158:9083): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.158:9084): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110605 suid=1000 rport=49348 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.159:9085): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154005.160:9086): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739154005.160:9087): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.161:9088): pid=110602 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739154005.177:9089): pid=110622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110622 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154005.178:9090): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110622 suid=74 rport=49362 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154005.178:9091): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110622 suid=74 rport=49362 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154005.249:9092): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.249:9093): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154005.280:9094): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.281:9095): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110622 suid=74 rport=49362 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154005.282:9096): pid=110621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154005.282:9097): pid=110621 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=37 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154005.282:9097): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffefe0639a0 a2=4 a3=3e8 items=0 ppid=10335 pid=110621 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154005.282:9097): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154005.283:9098): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154005.300:9099): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.301:9100): pid=110630 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154005.302:9101): pid=110630 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154005.343:9102): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154005.343:9103): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.344:9104): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154005.369:9105): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1739154005.369:9106): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.369:9107): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110630 suid=1000 rport=49362 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.369:9108): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1739154005.371:9109): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1739154005.371:9110): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.372:9111): pid=110621 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1739154005.387:9112): pid=110646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1739154005.388:9113): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110646 suid=74 rport=49378 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1739154005.388:9114): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=110646 suid=74 rport=49378 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1739154005.458:9115): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.458:9116): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:3e:c8:3d:c8:3c:9f:a8:9e:fd:2e:e1:7c:ab:1a:7c:d1:c1:e8:ab:d7:a0:b4:13:f2:76:32:81:92:c0:11:1b:6c exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1739154005.490:9117): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1739154005.490:9118): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110646 suid=74 rport=49378 laddr=10.0.0.29 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1739154005.492:9119): pid=110645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1739154005.492:9120): pid=110645 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1739154005.492:9120): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe17b60a30 a2=4 a3=3e8 items=0 ppid=10335 pid=110645 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1739154005.492:9120): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1739154005.493:9121): pid=110645 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1739154005.506:9122): pid=110645 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.507:9123): pid=110648 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1739154005.507:9124): pid=110648 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.29 addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1739154005.550:9125): pid=110645 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1739154005.550:9126): pid=110645 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.29 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1739154005.551:9127): pid=110645 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:5a:03:a7:3f:5c:d6:3e:c6:7e:99:d1:8d:6b:b2:72:da:3a:63:6d:2d:0a:5e:62:a1:01:ba:58:6a:62:bf:a1:8c direction=? spid=110649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1739154005.668:9128): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739154005.668:9129): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/k8s_manifests-logs" cmd=6E657473746174202D6C706E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739154005.668:9130): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739154005.670:9131): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739154005.720:9132): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739154005.721:9133): pid=110680 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739154005.828:9134): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739154005.828:9135): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/k8s_manifests-logs" cmd=6370202F6574632F6368726F6E792E636F6E66202F746D702F6B38735F6D616E6966657374732D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739154005.829:9136): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739154005.831:9137): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739154005.834:9138): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739154005.834:9139): pid=110698 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739154005.876:9140): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739154005.877:9141): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/k8s_manifests-logs" cmd=6370202F7661722F6C6F672F6D65737361676573202F746D702F6B38735F6D616E6966657374732D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739154005.877:9142): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739154005.879:9143): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1739154005.882:9144): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1739154005.882:9145): pid=110703 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1739154005.917:9146): pid=110707 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1739154005.917:9147): pid=110707 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/k8s_manifests-logs" cmd=62617368202D63206370202D72202F7661722F6C6F672F61756469742F2A202F746D702F6B38735F6D616E6966657374732D6C6F67732F6C6F67732F73797374656D2F61756469742F20323E2F6465762F6E756C6C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1739154005.917:9148): pid=110707 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1739154005.918:9149): pid=110707 uid=1000 auid=1000 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"