type=DAEMON_START msg=audit(1749910809.201:6068): op=start ver=3.1.5 format=enriched kernel=5.14.0-503.14.1.el9_5.x86_64 auid=4294967295 pid=694 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1749910809.212:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.221:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1749910809.413:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1749910809.413:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffe1387fc0 a2=3c a3=0 items=0 ppid=699 pid=714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910809.413:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1749910809.413:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1749910809.413:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffe1387fc0 a2=3c a3=0 items=0 ppid=699 pid=714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910809.413:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1749910809.413:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1749910809.413:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fffe1387fc0 a2=3c a3=0 items=0 ppid=699 pid=714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910809.413:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1749910809.415:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1749910809.434:11): pid=721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.438:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.708:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.733:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749910809.747:15): prog-id=20 op=LOAD
type=SERVICE_START msg=audit(1749910809.800:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749910809.802:17): prog-id=21 op=LOAD
type=BPF msg=audit(1749910809.820:18): prog-id=22 op=LOAD
type=BPF msg=audit(1749910809.820:19): prog-id=23 op=LOAD
type=SERVICE_START msg=audit(1749910809.823:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.828:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749910809.834:22): prog-id=24 op=LOAD
type=BPF msg=audit(1749910809.835:23): prog-id=25 op=LOAD
type=BPF msg=audit(1749910809.835:24): prog-id=26 op=LOAD
type=SERVICE_START msg=audit(1749910809.844:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.870:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910809.880:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749910817.934:28): prog-id=27 op=LOAD
type=BPF msg=audit(1749910817.934:29): prog-id=28 op=LOAD
type=SERVICE_START msg=audit(1749910817.982:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910818.076:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910818.242:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910818.256:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910818.274:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910818.281:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1749910819.619:36): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1749910819.622:37): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1749910819.622:38): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1749910819.622:39): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1749910819.622:40): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1749910819.622:41): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1749910819.718:42): pid=899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=ACCT_LOCK msg=audit(1749910819.750:43): pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1749910820.205:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.260:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.281:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.301:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910820.580:48): pid=918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1749910820.582:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.604:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.650:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.668:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.680:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.684:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.690:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1749910820.702:56): pid=1211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910820.706:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910820.706:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910821.159:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910822.424:60): pid=2128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=2128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910822.425:61): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2128 suid=74 rport=58424 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910822.425:62): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2128 suid=74 rport=58424 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910822.506:63): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910822.506:64): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910822.527:65): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910822.527:66): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2128 suid=74 rport=58424 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910822.529:67): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910822.529:68): pid=2127 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910822.529:68): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff2c3d9b0 a2=4 a3=3e8 items=0 ppid=1137 pid=2127 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910822.529:68): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910822.530:69): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910822.567:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910822.584:71): pid=2169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1749910822.584:72): pid=2169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1749910822.584:73): pid=2169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910822.584:74): pid=2169 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910822.584:74): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe79d864d0 a2=4 a3=3e8 items=0 ppid=1 pid=2169 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910822.584:74): proctitle="(systemd)"
type=USER_START msg=audit(1749910822.586:75): pid=2169 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910822.680:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1749910822.696:77): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910822.697:78): pid=2230 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=2230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910822.698:79): pid=2230 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910822.741:80): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910822.741:81): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910822.742:82): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=2271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910822.775:83): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910822.775:84): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910822.775:85): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2230 suid=1000 rport=58424 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910822.776:86): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=2230 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910822.777:87): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910822.777:88): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910822.778:89): pid=2127 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=2127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1749910828.385:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910829.174:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910832.866:92): pid=3954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910832.867:93): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3954 suid=74 rport=58484 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910832.867:94): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3954 suid=74 rport=58484 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910832.928:95): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910832.928:96): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910832.938:97): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910832.938:98): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3954 suid=74 rport=58484 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910832.940:99): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910832.940:100): pid=3953 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910832.940:100): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee7b71700 a2=4 a3=3e8 items=0 ppid=1137 pid=3953 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910832.940:100): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910832.940:101): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910832.959:102): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910832.960:103): pid=3956 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3956 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910832.961:104): pid=3956 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910833.007:105): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910833.007:106): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.008:107): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.061:108): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3956 suid=1000 rport=58484 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.062:109): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.063:110): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.064:111): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910833.064:112): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910833.064:113): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.064:114): pid=3953 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910833.084:115): pid=3975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910833.085:116): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3975 suid=74 rport=58486 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910833.085:117): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3975 suid=74 rport=58486 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910833.146:118): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.146:119): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910833.157:120): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.157:121): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3975 suid=74 rport=58486 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910833.159:122): pid=3974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910833.159:123): pid=3974 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910833.159:123): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd410c93b0 a2=4 a3=3e8 items=0 ppid=1137 pid=3974 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910833.159:123): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910833.160:124): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910833.176:125): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.177:126): pid=3977 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910833.178:127): pid=3977 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910833.220:128): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910833.220:129): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.221:130): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.269:131): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910833.269:132): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.269:133): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3977 suid=1000 rport=58486 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.269:134): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.270:135): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.270:136): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.271:137): pid=3974 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910833.286:138): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910833.287:139): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3996 suid=74 rport=58488 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910833.287:140): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3996 suid=74 rport=58488 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910833.348:141): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.348:142): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910833.358:143): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.358:144): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3996 suid=74 rport=58488 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910833.360:145): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910833.360:146): pid=3995 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910833.360:146): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd98686120 a2=4 a3=3e8 items=0 ppid=1137 pid=3995 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910833.360:146): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910833.361:147): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910833.382:148): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.383:149): pid=3998 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910833.383:150): pid=3998 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910833.427:151): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910833.427:152): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.428:153): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910833.485:154): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910833.485:155): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F7069702E636F6E66202F6574632F7069702E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910833.485:156): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910833.487:157): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.491:158): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.492:159): pid=4017 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749910833.501:160): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910833.501:161): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6B646972202D70202F6574632F646F636B65722F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910833.502:162): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910833.503:163): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.505:164): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.505:165): pid=4020 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749910833.515:166): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910833.515:167): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F646F636B65722D6461656D6F6E2E6A736F6E202F6574632F646F636B65722F6461656D6F6E2E6A736F6E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910833.515:168): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910833.516:169): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.520:170): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.520:171): pid=4023 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.522:172): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910833.522:173): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.522:174): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3998 suid=1000 rport=58488 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.522:175): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.524:176): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.524:177): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.524:178): pid=3995 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=3995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910833.537:179): pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910833.538:180): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4027 suid=74 rport=58490 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910833.538:181): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4027 suid=74 rport=58490 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910833.598:182): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.598:183): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910833.608:184): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.608:185): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4027 suid=74 rport=58490 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910833.610:186): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910833.610:187): pid=4026 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910833.610:187): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8ed37fa0 a2=4 a3=3e8 items=0 ppid=1137 pid=4026 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910833.610:187): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910833.610:188): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910833.629:189): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.630:190): pid=4029 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910833.631:191): pid=4029 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910833.676:192): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910833.676:193): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.677:194): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.698:195): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910833.698:196): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.698:197): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4029 suid=1000 rport=58490 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.698:198): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4029 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.699:199): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.700:200): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.700:201): pid=4026 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910833.716:202): pid=4047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910833.716:203): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4047 suid=74 rport=58492 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910833.717:204): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4047 suid=74 rport=58492 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910833.778:205): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.778:206): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910833.788:207): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.788:208): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4047 suid=74 rport=58492 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910833.790:209): pid=4046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910833.790:210): pid=4046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910833.790:210): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc1615b5a0 a2=4 a3=3e8 items=0 ppid=1137 pid=4046 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910833.790:210): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910833.791:211): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910833.814:212): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.815:213): pid=4049 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910833.816:214): pid=4049 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910833.859:215): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910833.859:216): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.860:217): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910833.886:218): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910833.886:219): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=657468746F6F6C202D4B2065746830207478206F6666 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910833.887:220): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910833.888:221): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.891:222): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.892:223): pid=4070 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910833.893:224): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910833.893:225): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.893:226): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4049 suid=1000 rport=58492 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.893:227): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910833.894:228): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910833.894:229): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910833.895:230): pid=4046 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910833.912:231): pid=4074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910833.912:232): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4074 suid=74 rport=58494 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910833.912:233): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4074 suid=74 rport=58494 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910833.972:234): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.972:235): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910833.982:236): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910833.982:237): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4074 suid=74 rport=58494 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910833.984:238): pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910833.984:239): pid=4073 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910833.984:239): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdcae79de0 a2=4 a3=3e8 items=0 ppid=1137 pid=4073 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910833.984:239): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910833.985:240): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910834.006:241): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.006:242): pid=4076 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910834.008:243): pid=4076 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910834.051:244): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910834.051:245): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.052:246): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.101:247): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910834.101:248): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.101:249): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4076 suid=1000 rport=58494 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.102:250): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.103:251): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.103:252): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.104:253): pid=4073 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910834.119:254): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910834.120:255): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4095 suid=74 rport=58496 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910834.120:256): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4095 suid=74 rport=58496 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910834.180:257): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.180:258): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910834.190:259): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.190:260): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4095 suid=74 rport=58496 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910834.191:261): pid=4094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910834.191:262): pid=4094 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910834.191:262): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc576feb00 a2=4 a3=3e8 items=0 ppid=1137 pid=4094 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910834.191:262): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910834.192:263): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910834.217:264): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.218:265): pid=4097 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910834.218:266): pid=4097 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910834.263:267): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910834.264:268): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.264:269): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4098 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910834.289:270): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910834.290:271): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D66202F6574632F79756D2E7265706F732E642F726F636B792D6164646F6E732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D646576656C2E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D6578747261732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792E7265706F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910834.290:272): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910834.291:273): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910834.293:274): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.293:275): pid=4114 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749910834.302:276): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910834.302:277): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D626173652D726F636B79392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910834.303:278): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910834.304:279): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910834.307:280): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.307:281): pid=4098 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910834.309:282): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910834.309:283): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.309:284): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4097 suid=1000 rport=58496 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.309:285): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.310:286): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.310:287): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.311:288): pid=4094 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910834.327:289): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910834.327:290): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4120 suid=74 rport=58498 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910834.327:291): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4120 suid=74 rport=58498 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910834.388:292): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.388:293): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910834.397:294): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.397:295): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4120 suid=74 rport=58498 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910834.399:296): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910834.399:297): pid=4119 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910834.399:297): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd40d59740 a2=4 a3=3e8 items=0 ppid=1137 pid=4119 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910834.399:297): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910834.399:298): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910834.422:299): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.423:300): pid=4122 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910834.424:301): pid=4122 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910834.467:302): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910834.467:303): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.469:304): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.512:305): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910834.512:306): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.512:307): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4122 suid=1000 rport=58498 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.512:308): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.513:309): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.513:310): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.514:311): pid=4119 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910834.527:312): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910834.528:313): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4141 suid=74 rport=58500 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910834.528:314): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4141 suid=74 rport=58500 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910834.588:315): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.588:316): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910834.597:317): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.598:318): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4141 suid=74 rport=58500 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910834.599:319): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910834.599:320): pid=4140 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910834.599:320): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc80969a60 a2=4 a3=3e8 items=0 ppid=1137 pid=4140 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910834.599:320): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910834.600:321): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910834.622:322): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.623:323): pid=4143 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910834.623:324): pid=4143 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910834.667:325): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910834.667:326): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.668:327): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910834.693:328): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910834.693:329): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D6570656C392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910834.693:330): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910834.695:331): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910834.698:332): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.698:333): pid=4144 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.700:334): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4143 suid=1000 rport=58500 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.700:335): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.701:336): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.701:337): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910834.702:338): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910834.702:339): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.702:340): pid=4140 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910834.715:341): pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910834.716:342): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4163 suid=74 rport=58502 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910834.716:343): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4163 suid=74 rport=58502 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910834.775:344): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.775:345): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910834.785:346): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910834.786:347): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4163 suid=74 rport=58502 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910834.787:348): pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910834.787:349): pid=4162 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910834.787:349): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee3b24d60 a2=4 a3=3e8 items=0 ppid=1137 pid=4162 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910834.787:349): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910834.788:350): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910834.801:351): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.802:352): pid=4165 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910834.803:353): pid=4165 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910834.847:354): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910834.847:355): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.849:356): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910834.876:357): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910834.876:358): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=746565202D61202F6574632F737973636F6E6669672F6E6574776F726B2D736372697074732F69666366672D65746831 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910834.877:359): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910834.879:360): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910834.881:361): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.881:362): pid=4183 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749910834.890:363): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910834.890:364): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2072657374617274204E6574776F726B4D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910834.891:365): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910834.892:366): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1749910834.899:367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910834.918:368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910834.923:369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910834.965:370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749910834.970:371): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.971:372): pid=4166 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.972:373): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4165 suid=1000 rport=58502 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.973:374): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910834.974:375): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910834.974:376): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910834.975:377): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910834.975:378): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910834.975:379): pid=4162 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910834.988:380): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910834.989:381): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4226 suid=74 rport=58504 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910834.989:382): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4226 suid=74 rport=58504 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910835.049:383): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910835.049:384): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910835.059:385): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910835.059:386): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4226 suid=74 rport=58504 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910835.061:387): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910835.061:388): pid=4220 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910835.061:388): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee13b0eb0 a2=4 a3=3e8 items=0 ppid=1137 pid=4220 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910835.061:388): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910835.062:389): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910835.083:390): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.084:391): pid=4248 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4248 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910835.085:392): pid=4248 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910835.127:393): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910835.127:394): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.129:395): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910835.167:396): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910835.167:397): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6F6470726F62652069705F7461626C6573 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910835.168:398): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910835.173:399): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910835.190:400): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910835.190:401): pid=4249 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910835.192:402): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910835.192:403): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.192:404): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4248 suid=1000 rport=58504 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.192:405): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910835.194:406): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910835.194:407): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.195:408): pid=4220 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910835.210:409): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910835.211:410): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4271 suid=74 rport=58506 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910835.211:411): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=4271 suid=74 rport=58506 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910835.270:412): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910835.270:413): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910835.280:414): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910835.280:415): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4271 suid=74 rport=58506 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910835.282:416): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910835.282:417): pid=4269 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910835.282:417): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe481c64b0 a2=4 a3=3e8 items=0 ppid=1137 pid=4269 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910835.282:417): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910835.283:418): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910835.303:419): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.304:420): pid=4273 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910835.305:421): pid=4273 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910835.347:422): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910835.347:423): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910835.348:424): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910835.374:425): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910835.374:426): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206F70656E7373682D736572766572206F70656E73736C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910835.374:427): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910835.375:428): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1749910845.041:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910850.928:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf1aa4854279b4b4196e8d0a440567bca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910850.961:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rfc21061ac68b4059970693fac2b94e0e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1749910850.965:432): pid=4291 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910850.965:433): pid=4291 uid=0 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910851.412:434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910851.415:435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=packagekit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749910851.543:436): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910851.543:437): pid=4274 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910851.545:438): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910851.545:439): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.545:440): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4273 suid=1000 rport=58506 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.546:441): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910851.547:442): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910851.547:443): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.547:444): pid=4269 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=4269 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910851.563:445): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910851.564:446): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=5358 suid=74 rport=58508 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910851.564:447): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=5358 suid=74 rport=58508 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910851.628:448): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910851.628:449): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910851.638:450): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910851.639:451): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5358 suid=74 rport=58508 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910851.641:452): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910851.641:453): pid=5337 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910851.641:453): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffe3236380 a2=4 a3=3e8 items=0 ppid=1137 pid=5337 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910851.641:453): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910851.642:454): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910851.664:455): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.665:456): pid=5521 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910851.666:457): pid=5521 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910851.711:458): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910851.711:459): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.711:460): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.732:461): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5521 suid=1000 rport=58508 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.733:462): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910851.734:463): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910851.734:464): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910851.735:465): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910851.735:466): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.735:467): pid=5337 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910851.750:468): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910851.750:469): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=5699 suid=74 rport=58510 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910851.750:470): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=5699 suid=74 rport=58510 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910851.811:471): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910851.811:472): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910851.820:473): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910851.820:474): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5699 suid=74 rport=58510 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910851.822:475): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910851.822:476): pid=5681 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910851.822:476): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc97d41430 a2=4 a3=3e8 items=0 ppid=1137 pid=5681 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910851.822:476): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910851.822:477): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910851.837:478): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.838:479): pid=5906 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910851.839:480): pid=5906 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910851.882:481): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910851.882:482): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.883:483): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=6011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910851.901:484): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910851.901:485): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.901:486): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5906 suid=1000 rport=58510 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.901:487): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910851.902:488): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910851.903:489): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910851.903:490): pid=5681 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=5681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_START msg=audit(1749910856.632:491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910856.632:492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910856.666:493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf1aa4854279b4b4196e8d0a440567bca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910856.667:494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rfc21061ac68b4059970693fac2b94e0e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910862.034:495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910862.055:496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910864.973:497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749910865.011:498): prog-id=28 op=UNLOAD
type=BPF msg=audit(1749910865.011:499): prog-id=27 op=UNLOAD
type=SERVICE_START msg=audit(1749910866.754:500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910866.759:501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.308:502): pid=14412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910875.309:503): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14412 suid=74 rport=58562 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910875.309:504): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14412 suid=74 rport=58562 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910875.367:505): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.367:506): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910875.377:507): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.377:508): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14412 suid=74 rport=58562 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910875.379:509): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910875.379:510): pid=14411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910875.379:510): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8cbeefe0 a2=4 a3=3e8 items=0 ppid=1137 pid=14411 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910875.379:510): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910875.379:511): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910875.406:512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910875.412:513): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1749910875.413:514): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1749910875.413:515): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910875.413:516): pid=14415 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910875.413:516): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe79d864d0 a2=4 a3=3e8 items=0 ppid=1 pid=14415 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910875.413:516): proctitle="(systemd)"
type=USER_START msg=audit(1749910875.414:517): pid=14415 uid=0 auid=1000 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910875.489:518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1749910875.503:519): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.504:520): pid=14424 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910875.505:521): pid=14424 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910875.551:522): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910875.551:523): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.552:524): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.571:525): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14424 suid=1000 rport=58562 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.571:526): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910875.573:527): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910875.573:528): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910875.574:529): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910875.574:530): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.574:531): pid=14411 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910875.591:532): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910875.591:533): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14443 suid=74 rport=58564 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910875.591:534): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14443 suid=74 rport=58564 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910875.650:535): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.650:536): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910875.660:537): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.661:538): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14443 suid=74 rport=58564 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910875.662:539): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910875.662:540): pid=14442 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910875.662:540): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffec2e4a20 a2=4 a3=3e8 items=0 ppid=1137 pid=14442 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910875.662:540): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910875.663:541): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910875.682:542): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.683:543): pid=14445 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910875.684:544): pid=14445 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910875.726:545): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910875.727:546): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.728:547): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.753:548): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14445 suid=1000 rport=58564 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.753:549): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910875.754:550): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910875.754:551): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910875.755:552): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910875.755:553): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.755:554): pid=14442 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910875.774:555): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910875.774:556): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14463 suid=74 rport=58566 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910875.774:557): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14463 suid=74 rport=58566 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910875.836:558): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.836:559): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910875.846:560): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910875.846:561): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14463 suid=74 rport=58566 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910875.847:562): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910875.848:563): pid=14462 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910875.848:563): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffedcfb5670 a2=4 a3=3e8 items=0 ppid=1137 pid=14462 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910875.848:563): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910875.848:564): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910875.868:565): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.869:566): pid=14465 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910875.870:567): pid=14465 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910875.915:568): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910875.915:569): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.916:570): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.939:571): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14465 suid=1000 rport=58566 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.939:572): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14465 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910875.941:573): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910875.941:574): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910875.941:575): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910875.941:576): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910875.941:577): pid=14462 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910875.956:578): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14483 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910875.956:579): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14483 suid=74 rport=58568 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910875.956:580): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14483 suid=74 rport=58568 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910876.017:581): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.017:582): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910876.026:583): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.027:584): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14483 suid=74 rport=58568 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910876.028:585): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910876.028:586): pid=14482 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910876.028:586): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff841adcc0 a2=4 a3=3e8 items=0 ppid=1137 pid=14482 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910876.028:586): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910876.029:587): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910876.052:588): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.053:589): pid=14485 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14485 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910876.054:590): pid=14485 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910876.098:591): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910876.098:592): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.099:593): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910876.118:594): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910876.118:595): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.118:596): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14485 suid=1000 rport=58568 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.118:597): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910876.119:598): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910876.119:599): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.120:600): pid=14482 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910876.137:601): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910876.137:602): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14505 suid=74 rport=58570 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910876.137:603): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14505 suid=74 rport=58570 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910876.200:604): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.200:605): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910876.210:606): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.210:607): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14505 suid=74 rport=58570 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910876.211:608): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910876.211:609): pid=14504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910876.211:609): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc96c1d950 a2=4 a3=3e8 items=0 ppid=1137 pid=14504 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910876.211:609): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910876.212:610): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910876.225:611): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.226:612): pid=14507 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910876.227:613): pid=14507 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910876.271:614): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910876.271:615): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.272:616): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.288:617): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14507 suid=1000 rport=58570 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.288:618): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910876.289:619): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910876.290:620): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749910876.290:621): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910876.290:622): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.290:623): pid=14504 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910876.307:624): pid=14525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910876.308:625): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14525 suid=74 rport=58572 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910876.308:626): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14525 suid=74 rport=58572 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910876.366:627): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.366:628): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910876.376:629): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910876.376:630): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14525 suid=74 rport=58572 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910876.377:631): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910876.377:632): pid=14524 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910876.377:632): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcd89d7ad0 a2=4 a3=3e8 items=0 ppid=1137 pid=14524 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910876.377:632): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910876.378:633): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910876.400:634): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.401:635): pid=14527 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910876.402:636): pid=14527 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910876.446:637): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910876.446:638): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.447:639): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910876.474:640): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910876.474:641): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63207072696E746620225C6E31302E302E302E32353420202020636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D616E7369626C652D6B38732D3338362D315C6E22203E3E202F6574632F686F737473 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910876.475:642): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910876.477:643): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910876.479:644): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910876.479:645): pid=14528 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910876.480:646): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910876.481:647): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.481:648): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14527 suid=1000 rport=58572 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.481:649): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910876.482:650): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910876.482:651): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910876.483:652): pid=14524 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1749910876.796:653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910877.361:654): pid=14547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910877.362:655): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14547 suid=74 rport=58576 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910877.362:656): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14547 suid=74 rport=58576 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910877.421:657): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910877.421:658): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910877.431:659): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910877.431:660): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14547 suid=74 rport=58576 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910877.433:661): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910877.433:662): pid=14546 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910877.433:662): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff50c709e0 a2=4 a3=3e8 items=0 ppid=1137 pid=14546 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910877.433:662): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910877.434:663): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910877.453:664): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.454:665): pid=14549 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14549 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910877.454:666): pid=14549 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910877.499:667): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910877.499:668): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.501:669): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910877.668:670): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749910877.668:671): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.668:672): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14549 suid=1000 rport=58576 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.668:673): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749910877.669:674): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749910877.669:675): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.670:676): pid=14546 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749910877.684:677): pid=14568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749910877.685:678): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14568 suid=74 rport=58578 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749910877.685:679): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14568 suid=74 rport=58578 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749910877.744:680): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910877.744:681): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749910877.754:682): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749910877.754:683): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14568 suid=74 rport=58578 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749910877.755:684): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749910877.755:685): pid=14567 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749910877.755:685): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8183d890 a2=4 a3=3e8 items=0 ppid=1137 pid=14567 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749910877.755:685): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749910877.756:686): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749910877.776:687): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.777:688): pid=14570 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749910877.778:689): pid=14570 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749910877.824:690): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749910877.824:691): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749910877.825:692): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14571 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749910877.916:693): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910877.916:694): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620636865636B2D757064617465 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910877.916:695): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910877.918:696): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749910878.433:697): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910878.433:698): pid=14645 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749910878.444:699): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749910878.444:700): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206375726C20707974686F6E3320707974686F6E332D7365747570746F6F6C73206C696273656C696E75782D707974686F6E33206970726F757465206A712062696E642D7574696C7320707974686F6E332D706970206F70656E7373682D736572766572206F70656E7373682D636C69656E747320707974686F6E332D7669727475616C656E76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749910878.444:701): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749910878.446:702): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1749910882.154:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra5d791a4325a4cacb822dd1eb356c9f6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749910882.174:704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r165b245cfa2045bbbfd3d2e0151fd2d3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:705): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libs-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:706): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python-unversioned-command-3.9.21-1.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:707): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:708): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:709): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-distlib-0.3.2-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:710): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-filelock-3.7.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:711): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-platformdirs-2.5.4-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:712): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wheel-wheel-1:0.36.2-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:713): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-2.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.186:714): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.187:715): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.187:716): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.187:717): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.187:718): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-virtualenv-20.21.1-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749910882.187:719): pid=14650 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pip-21.3.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749910883.161:720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910883.161:721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910883.181:722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra5d791a4325a4cacb822dd1eb356c9f6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749910883.182:723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r165b245cfa2045bbbfd3d2e0151fd2d3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749910883.393:724): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749910883.393:725): pid=14648 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749911002.806:726): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911002.807:727): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D7266202F686F6D652F726F636B792F74662D616E7369626C652D6465706C6F796572 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911002.807:728): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911002.809:729): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911002.811:730): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911002.811:731): pid=14959 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749911006.068:732): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911006.069:733): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/tf-ansible-deployer/playbooks" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870726D636571616D79646B637A6A7661737967706F626A657379736672656D203B205049505F425245414B5F53595354454D5F5041434B414745533D31202F686F6D652F726F636B792F2E76656E762F62696E2F707974686F6E33202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313030362E303338323633382D31353037302D3236383034393533343834323639312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911006.069:734): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911006.070:735): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911007.866:736): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911007.866:737): pid=15082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911014.360:738): pid=15271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911014.361:739): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15271 suid=74 rport=57890 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911014.361:740): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15271 suid=74 rport=57890 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1749911016.762:741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1749911017.265:742): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911017.265:743): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5e:95:40:d2:39:9c:e0:ba:f3:12:b5:21:28:ab:dc:a9:c8:48:91:ce:3b:b6:b2:46:f9:05:e6:4f:d0:09:04:09 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911017.276:744): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911017.277:745): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15271 suid=74 rport=57890 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911017.278:746): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911017.278:747): pid=15270 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911017.278:747): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffec5657d60 a2=4 a3=3e8 items=0 ppid=1137 pid=15270 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911017.278:747): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911017.279:748): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911017.294:749): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.295:750): pid=15278 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911017.296:751): pid=15278 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911017.338:752): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.338:753): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.340:754): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.361:755): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.361:756): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.370:757): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.370:758): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.371:759): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15296 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.398:760): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.399:761): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.410:762): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.410:763): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.411:764): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.433:765): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.433:766): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.444:767): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.444:768): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.445:769): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.490:770): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.490:771): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.508:772): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.508:773): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.509:774): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.547:775): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.547:776): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.557:777): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.557:778): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.558:779): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911017.576:780): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911017.576:781): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911017.586:782): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911017.586:783): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911017.586:784): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911017.616:785): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911017.616:786): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6574706F66726E6679737276626E6C716E737579737273716876616D7A697569203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313031372E333633353639352D31353236382D3133333639333231373838323438392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911017.617:787): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911017.619:788): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911018.247:789): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911018.247:790): pid=15410 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911018.250:791): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.250:792): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.262:793): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.262:794): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.263:795): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15447 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911018.287:796): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.287:797): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.525:798): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.525:799): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.526:800): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911018.549:801): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.549:802): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.559:803): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.559:804): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.560:805): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911018.585:806): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.585:807): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.600:808): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.600:809): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.601:810): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911018.634:811): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.634:812): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.644:813): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.644:814): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.645:815): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911018.667:816): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911018.667:817): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911018.679:818): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911018.679:819): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911018.680:820): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911018.714:821): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911018.714:822): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7067706C6B71686263766E6F65746B647562686C7279697673756673746363203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313031382E353531363030352D31353436372D3235383433353132353437333337362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911018.715:823): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911018.717:824): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911019.164:825): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911019.164:826): pid=15563 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911019.166:827): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.166:828): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.178:829): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.178:830): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.179:831): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911019.204:832): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.204:833): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.413:834): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.413:835): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.414:836): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911019.438:837): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.438:838): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.449:839): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.449:840): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.450:841): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911019.477:842): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.477:843): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.492:844): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.492:845): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.493:846): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911019.529:847): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.529:848): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.540:849): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.540:850): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.541:851): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911019.563:852): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911019.563:853): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911019.575:854): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911019.575:855): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911019.576:856): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15668 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911019.610:857): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911019.611:858): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F62756870637967736C7A757A6A71626F636B657779726E776F646B6A726276203B2068747470735F70726F78793D272720687474705F70726F78793D2727205049505F425245414B5F53595354454D5F5041434B414745533D31202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313031392E3434303536312D31353539302D3233373634333935353132353435312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911019.611:859): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911019.613:860): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911020.439:861): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911020.439:862): pid=15686 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911020.442:863): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911020.442:864): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911020.452:865): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911020.452:866): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911020.453:867): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911020.476:868): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911020.476:869): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.316:870): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.316:871): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.317:872): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.338:873): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.338:874): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.348:875): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.348:876): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.349:877): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15740 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.376:878): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.377:879): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.393:880): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.393:881): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.393:882): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15764 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.423:883): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.423:884): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.432:885): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.432:886): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.433:887): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15781 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.452:888): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.452:889): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.461:890): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.461:891): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.461:892): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15799 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911021.489:893): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911021.490:894): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7775646E656976766E676C68687771646A6B716669717968756B6D7671746479203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032312E333430393038332D31353732312D39373730343530343136303631352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911021.490:895): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911021.492:896): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911021.636:897): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911021.636:898): pid=15817 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911021.639:899): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.639:900): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.648:901): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.648:902): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.649:903): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15823 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.669:904): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.669:905): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.809:906): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.809:907): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.810:908): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15843 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.829:909): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.829:910): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911021.838:911): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911021.838:912): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911021.839:913): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911021.862:914): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911021.862:915): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.113:916): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.113:917): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.114:918): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.152:919): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.152:920): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.162:921): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.162:922): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.163:923): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15901 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.184:924): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.184:925): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.193:926): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.193:927): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.194:928): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911022.221:929): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911022.222:930): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7668787A76726F716D746D61676470756361697A6E7565746D68756772617270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032312E383331353635342D31353834312D3233313639313832383039373439332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911022.222:931): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911022.224:932): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911022.619:933): prog-id=29 op=LOAD
type=BPF msg=audit(1749911022.619:934): prog-id=30 op=LOAD
type=BPF msg=audit(1749911022.619:935): prog-id=22 op=UNLOAD
type=BPF msg=audit(1749911022.619:936): prog-id=23 op=UNLOAD
type=BPF msg=audit(1749911022.620:937): prog-id=31 op=LOAD
type=BPF msg=audit(1749911022.620:938): prog-id=20 op=UNLOAD
type=BPF msg=audit(1749911022.621:939): prog-id=32 op=LOAD
type=BPF msg=audit(1749911022.621:940): prog-id=24 op=UNLOAD
type=BPF msg=audit(1749911022.621:941): prog-id=33 op=LOAD
type=BPF msg=audit(1749911022.621:942): prog-id=34 op=LOAD
type=BPF msg=audit(1749911022.621:943): prog-id=25 op=UNLOAD
type=BPF msg=audit(1749911022.621:944): prog-id=26 op=UNLOAD
type=BPF msg=audit(1749911022.622:945): prog-id=35 op=LOAD
type=BPF msg=audit(1749911022.622:946): prog-id=15 op=UNLOAD
type=BPF msg=audit(1749911022.622:947): prog-id=36 op=LOAD
type=BPF msg=audit(1749911022.622:948): prog-id=37 op=LOAD
type=BPF msg=audit(1749911022.622:949): prog-id=16 op=UNLOAD
type=BPF msg=audit(1749911022.622:950): prog-id=17 op=UNLOAD
type=BPF msg=audit(1749911022.623:951): prog-id=38 op=LOAD
type=BPF msg=audit(1749911022.623:952): prog-id=21 op=UNLOAD
type=BPF msg=audit(1749911022.624:953): prog-id=39 op=LOAD
type=BPF msg=audit(1749911022.624:954): prog-id=40 op=LOAD
type=BPF msg=audit(1749911022.624:955): prog-id=18 op=UNLOAD
type=BPF msg=audit(1749911022.624:956): prog-id=19 op=UNLOAD
type=SERVICE_STOP msg=audit(1749911022.641:957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911022.668:958): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911022.668:959): pid=15937 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911022.671:960): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.671:961): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.681:962): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.681:963): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.683:964): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.707:965): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.707:966): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.745:967): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.745:968): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.746:969): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.771:970): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.771:971): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.780:972): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.780:973): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.782:974): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.812:975): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.812:976): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.828:977): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.828:978): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.829:979): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.881:980): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.881:981): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.895:982): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.895:983): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.896:984): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911022.922:985): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911022.922:986): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911022.936:987): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911022.936:988): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911022.937:989): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911022.965:990): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911022.965:991): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D646E7064666870706874637A677A797178646A6D726E7966746B69766868203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032322E3737333139332D31353834312D3231373032303233353839353439312F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911022.966:992): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911022.967:993): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911023.353:994): prog-id=41 op=LOAD
type=BPF msg=audit(1749911023.353:995): prog-id=42 op=LOAD
type=BPF msg=audit(1749911023.353:996): prog-id=29 op=UNLOAD
type=BPF msg=audit(1749911023.353:997): prog-id=30 op=UNLOAD
type=BPF msg=audit(1749911023.354:998): prog-id=43 op=LOAD
type=BPF msg=audit(1749911023.354:999): prog-id=31 op=UNLOAD
type=BPF msg=audit(1749911023.355:1000): prog-id=44 op=LOAD
type=BPF msg=audit(1749911023.355:1001): prog-id=32 op=UNLOAD
type=BPF msg=audit(1749911023.355:1002): prog-id=45 op=LOAD
type=BPF msg=audit(1749911023.355:1003): prog-id=46 op=LOAD
type=BPF msg=audit(1749911023.355:1004): prog-id=33 op=UNLOAD
type=BPF msg=audit(1749911023.355:1005): prog-id=34 op=UNLOAD
type=BPF msg=audit(1749911023.356:1006): prog-id=47 op=LOAD
type=BPF msg=audit(1749911023.356:1007): prog-id=35 op=UNLOAD
type=BPF msg=audit(1749911023.356:1008): prog-id=48 op=LOAD
type=BPF msg=audit(1749911023.356:1009): prog-id=49 op=LOAD
type=BPF msg=audit(1749911023.356:1010): prog-id=36 op=UNLOAD
type=BPF msg=audit(1749911023.356:1011): prog-id=37 op=UNLOAD
type=BPF msg=audit(1749911023.357:1012): prog-id=50 op=LOAD
type=BPF msg=audit(1749911023.357:1013): prog-id=38 op=UNLOAD
type=BPF msg=audit(1749911023.358:1014): prog-id=51 op=LOAD
type=BPF msg=audit(1749911023.358:1015): prog-id=52 op=LOAD
type=BPF msg=audit(1749911023.358:1016): prog-id=39 op=UNLOAD
type=BPF msg=audit(1749911023.358:1017): prog-id=40 op=UNLOAD
type=SERVICE_STOP msg=audit(1749911023.370:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911023.390:1019): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911023.390:1020): pid=16086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911023.392:1021): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.392:1022): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.402:1023): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.402:1024): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.403:1025): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911023.423:1026): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.423:1027): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.458:1028): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.458:1029): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.459:1030): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911023.477:1031): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.477:1032): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.486:1033): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.486:1034): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.486:1035): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16157 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911023.509:1036): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.510:1037): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.524:1038): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.524:1039): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.525:1040): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911023.562:1041): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.562:1042): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.572:1043): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.572:1044): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.573:1045): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911023.592:1046): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911023.592:1047): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911023.602:1048): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911023.602:1049): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911023.603:1050): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911023.631:1051): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911023.632:1052): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262696777626B6C6863696578696B7A6479707372796B726F756D6C73736E67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032332E3437393432352D31353834312D35313039383736363638323232372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911023.632:1053): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911023.634:1054): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911024.019:1055): prog-id=53 op=LOAD
type=BPF msg=audit(1749911024.019:1056): prog-id=54 op=LOAD
type=BPF msg=audit(1749911024.019:1057): prog-id=41 op=UNLOAD
type=BPF msg=audit(1749911024.019:1058): prog-id=42 op=UNLOAD
type=BPF msg=audit(1749911024.019:1059): prog-id=55 op=LOAD
type=BPF msg=audit(1749911024.019:1060): prog-id=43 op=UNLOAD
type=BPF msg=audit(1749911024.020:1061): prog-id=56 op=LOAD
type=BPF msg=audit(1749911024.020:1062): prog-id=44 op=UNLOAD
type=BPF msg=audit(1749911024.020:1063): prog-id=57 op=LOAD
type=BPF msg=audit(1749911024.020:1064): prog-id=58 op=LOAD
type=BPF msg=audit(1749911024.020:1065): prog-id=45 op=UNLOAD
type=BPF msg=audit(1749911024.020:1066): prog-id=46 op=UNLOAD
type=BPF msg=audit(1749911024.021:1067): prog-id=59 op=LOAD
type=BPF msg=audit(1749911024.021:1068): prog-id=47 op=UNLOAD
type=BPF msg=audit(1749911024.021:1069): prog-id=60 op=LOAD
type=BPF msg=audit(1749911024.021:1070): prog-id=61 op=LOAD
type=BPF msg=audit(1749911024.021:1071): prog-id=48 op=UNLOAD
type=BPF msg=audit(1749911024.021:1072): prog-id=49 op=UNLOAD
type=BPF msg=audit(1749911024.022:1073): prog-id=62 op=LOAD
type=BPF msg=audit(1749911024.022:1074): prog-id=50 op=UNLOAD
type=BPF msg=audit(1749911024.024:1075): prog-id=63 op=LOAD
type=BPF msg=audit(1749911024.024:1076): prog-id=64 op=LOAD
type=BPF msg=audit(1749911024.024:1077): prog-id=51 op=UNLOAD
type=BPF msg=audit(1749911024.024:1078): prog-id=52 op=UNLOAD
type=SERVICE_STOP msg=audit(1749911024.036:1079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911024.055:1080): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911024.055:1081): pid=16234 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911024.057:1082): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.057:1083): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.069:1084): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.069:1085): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.069:1086): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.090:1087): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.090:1088): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.125:1089): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.125:1090): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.125:1091): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.145:1092): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.145:1093): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.155:1094): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.155:1095): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.156:1096): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16305 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.179:1097): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.179:1098): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.193:1099): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.193:1100): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.194:1101): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.230:1102): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.230:1103): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.240:1104): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.240:1105): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.241:1106): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.261:1107): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.261:1108): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.271:1109): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.271:1110): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.271:1111): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16364 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911024.301:1112): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911024.301:1113): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6769726875716C616A79786C68756C686B65776D797768666D73616466627874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032342E313437383238332D31353834312D3238303839353738343634393934362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911024.301:1114): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911024.303:1115): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911024.689:1116): prog-id=65 op=LOAD
type=BPF msg=audit(1749911024.689:1117): prog-id=66 op=LOAD
type=BPF msg=audit(1749911024.689:1118): prog-id=53 op=UNLOAD
type=BPF msg=audit(1749911024.689:1119): prog-id=54 op=UNLOAD
type=BPF msg=audit(1749911024.689:1120): prog-id=67 op=LOAD
type=BPF msg=audit(1749911024.689:1121): prog-id=55 op=UNLOAD
type=BPF msg=audit(1749911024.690:1122): prog-id=68 op=LOAD
type=BPF msg=audit(1749911024.690:1123): prog-id=56 op=UNLOAD
type=BPF msg=audit(1749911024.690:1124): prog-id=69 op=LOAD
type=BPF msg=audit(1749911024.690:1125): prog-id=70 op=LOAD
type=BPF msg=audit(1749911024.690:1126): prog-id=57 op=UNLOAD
type=BPF msg=audit(1749911024.690:1127): prog-id=58 op=UNLOAD
type=BPF msg=audit(1749911024.691:1128): prog-id=71 op=LOAD
type=BPF msg=audit(1749911024.691:1129): prog-id=59 op=UNLOAD
type=BPF msg=audit(1749911024.691:1130): prog-id=72 op=LOAD
type=BPF msg=audit(1749911024.691:1131): prog-id=73 op=LOAD
type=BPF msg=audit(1749911024.691:1132): prog-id=60 op=UNLOAD
type=BPF msg=audit(1749911024.691:1133): prog-id=61 op=UNLOAD
type=BPF msg=audit(1749911024.692:1134): prog-id=74 op=LOAD
type=BPF msg=audit(1749911024.692:1135): prog-id=62 op=UNLOAD
type=BPF msg=audit(1749911024.694:1136): prog-id=75 op=LOAD
type=BPF msg=audit(1749911024.694:1137): prog-id=76 op=LOAD
type=BPF msg=audit(1749911024.694:1138): prog-id=63 op=UNLOAD
type=BPF msg=audit(1749911024.694:1139): prog-id=64 op=UNLOAD
type=SERVICE_STOP msg=audit(1749911024.706:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911024.724:1141): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911024.724:1142): pid=16382 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911024.726:1143): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.726:1144): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.737:1145): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.737:1146): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.738:1147): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.757:1148): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.757:1149): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.794:1150): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.794:1151): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.795:1152): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.812:1153): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.812:1154): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.821:1155): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.821:1156): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.822:1157): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.844:1158): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.844:1159): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.857:1160): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.857:1161): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.858:1162): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.894:1163): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.894:1164): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.903:1165): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.903:1166): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.904:1167): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911024.924:1168): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911024.924:1169): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911024.933:1170): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911024.933:1171): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911024.934:1172): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911024.961:1173): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911024.961:1174): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C68657A63787564717975666C62647777716F737A6D617275746D616B616679203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032342E383134383533322D31353834312D37353238353239363730353834322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911024.961:1175): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911024.963:1176): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911025.233:1177): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911025.233:1178): pid=16530 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911025.235:1179): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.235:1180): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.245:1181): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.245:1182): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.246:1183): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911025.264:1184): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.264:1185): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.480:1186): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.480:1187): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.481:1188): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911025.499:1189): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.499:1190): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.508:1191): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.508:1192): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.509:1193): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911025.531:1194): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.531:1195): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.766:1196): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.766:1197): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.767:1198): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911025.804:1199): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.804:1200): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.814:1201): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.814:1202): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.815:1203): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911025.834:1204): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911025.834:1205): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911025.844:1206): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911025.844:1207): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911025.845:1208): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911025.872:1209): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911025.872:1210): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6367677564626A7661716976716B6E79656766797177696A7270696B666870203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032352E353031333739372D31363535352D37383335373436363439343438342F416E736962616C6C5A5F73656C696E75782E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911025.873:1211): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911025.874:1212): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_STATUS msg=audit(1749911026.102:1213): enforcing=0 old_enforcing=1 auid=1000 ses=26 enabled=1 old-enabled=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1749911026.102:1213): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7ffcbc3a8590 a2=1 a3=0 items=0 ppid=16651 pid=16653 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="python3.9" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911026.102:1213): proctitle=2F7573722F62696E2F707974686F6E332E39002F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032352E353031333739372D31363535352D37383335373436363439343438342F416E736962616C6C5A5F73656C696E75782E7079
type=USER_END msg=audit(1749911026.124:1214): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911026.124:1215): pid=16651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911026.126:1216): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911026.126:1217): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911026.136:1218): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911026.136:1219): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911026.137:1220): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911026.156:1221): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911026.156:1222): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911026.761:1223): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911026.761:1224): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911026.762:1225): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16691 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911026.779:1226): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911026.779:1227): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911026.787:1228): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911026.787:1229): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911026.788:1230): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911026.808:1231): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911026.808:1232): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911026.941:1233): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911026.941:1234): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911026.942:1235): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911026.970:1236): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911026.970:1237): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911026.980:1238): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911026.980:1239): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911026.981:1240): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.001:1241): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.001:1242): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.012:1243): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.012:1244): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.013:1245): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16767 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911027.041:1246): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911027.041:1247): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68636D727873796A636E7163786D666E7761706B66676F636D6A696E676D7A77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032362E373831333131382D31363638392D3236313131363231393932363335342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911027.041:1248): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911027.043:1249): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911027.177:1250): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911027.177:1251): pid=16785 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911027.180:1252): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.180:1253): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.189:1254): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.189:1255): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.190:1256): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.209:1257): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.209:1258): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.527:1259): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.527:1260): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.528:1261): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.546:1262): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.546:1263): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.554:1264): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.554:1265): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.555:1266): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.577:1267): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.577:1268): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.590:1269): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.590:1270): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.591:1271): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.619:1272): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.619:1273): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.628:1274): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.628:1275): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.629:1276): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16871 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.648:1277): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.648:1278): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.657:1279): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.657:1280): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.658:1281): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911027.684:1282): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911027.684:1283): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D7A6C7573736A6C6C7A68746562796C6B7268776970706979646665777077203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032372E3534383139342D31363831312D3231303036323432313633333935352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911027.684:1284): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911027.686:1285): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911027.850:1286): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911027.850:1287): pid=16907 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911027.853:1288): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.853:1289): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911027.862:1290): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911027.862:1291): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911027.863:1292): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911027.884:1293): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911027.884:1294): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911028.761:1295): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911028.761:1296): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911028.761:1297): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911028.783:1298): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911028.783:1299): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911028.793:1300): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911028.793:1301): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911028.794:1302): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=16982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911028.816:1303): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911028.816:1304): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911028.920:1305): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911028.920:1306): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911028.921:1307): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911028.952:1308): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911028.952:1309): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911028.961:1310): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911028.961:1311): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911028.962:1312): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911028.981:1313): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911028.981:1314): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911028.990:1315): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911028.990:1316): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911028.991:1317): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911029.018:1318): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911029.018:1319): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E736A6D6F67666B696472686E706E74726A767A707776776F746C6C766B7A67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032382E373835343237382D31363936332D3132343738393436363130393536312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911029.018:1320): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911029.020:1321): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911029.166:1322): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911029.167:1323): pid=17059 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911029.169:1324): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.169:1325): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.178:1326): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.178:1327): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.179:1328): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17063 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911029.200:1329): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.200:1330): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.607:1331): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.607:1332): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.608:1333): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911029.628:1334): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.628:1335): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.637:1336): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.637:1337): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.637:1338): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17112 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911029.660:1339): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.660:1340): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.789:1341): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.789:1342): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.790:1343): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911029.817:1344): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.817:1345): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.827:1346): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.827:1347): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.828:1348): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911029.846:1349): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911029.846:1350): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911029.855:1351): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911029.855:1352): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911029.856:1353): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911029.882:1354): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911029.882:1355): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A746A73686A7A687579616574717573696675647867767867677663616677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313032392E363330343231342D31373039332D3231323432393634383530353035382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911029.882:1356): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911029.884:1357): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911030.028:1358): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911030.028:1359): pid=17189 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911030.030:1360): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.030:1361): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.040:1362): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.040:1363): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.041:1364): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17193 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.063:1365): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.063:1366): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.197:1367): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.197:1368): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.197:1369): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.216:1370): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.216:1371): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.225:1372): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.225:1373): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.226:1374): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17230 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.249:1375): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.249:1376): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.374:1377): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.374:1378): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.374:1379): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.403:1380): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.403:1381): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.412:1382): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.412:1383): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.413:1384): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.432:1385): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.432:1386): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.441:1387): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.441:1388): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.442:1389): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17289 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911030.473:1390): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911030.473:1391): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636E656967736B77707264796E6363636268697872626372696C6D76686D6E66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033302E323138333435362D31373231312D313435303737373435343833342F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911030.473:1392): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911030.475:1393): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911030.659:1394): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911030.659:1395): pid=17307 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911030.662:1396): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.662:1397): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.671:1398): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.671:1399): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.672:1400): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17315 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.693:1401): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.693:1402): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.837:1403): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.837:1404): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.838:1405): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.856:1406): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.856:1407): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.865:1408): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.865:1409): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.866:1410): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.888:1411): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.888:1412): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.901:1413): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.901:1414): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.902:1415): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17376 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.933:1416): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.933:1417): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.943:1418): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.943:1419): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.944:1420): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911030.963:1421): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911030.963:1422): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911030.972:1423): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911030.972:1424): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911030.973:1425): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911031.000:1426): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911031.000:1427): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6270796D7767637A6871626E6A6668666A70756D6B6D777066666E6D6D726E74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033302E383538393132372D31373333332D3139313034383933323238353132392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911031.001:1428): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911031.003:1429): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911031.145:1430): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911031.145:1431): pid=17429 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911031.148:1432): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.148:1433): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.158:1434): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.158:1435): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.159:1436): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.182:1437): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.182:1438): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.306:1439): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.306:1440): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.307:1441): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.325:1442): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.325:1443): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.334:1444): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.334:1445): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.334:1446): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.356:1447): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.356:1448): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.371:1449): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.371:1450): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.372:1451): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.398:1452): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.398:1453): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.408:1454): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.408:1455): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.409:1456): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.428:1457): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.428:1458): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.441:1459): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.441:1460): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.442:1461): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911031.478:1462): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911031.478:1463): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A766A64666A71786D706C6F67756E77786D697064627875687A737577736E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033312E333237353135312D31373435332D3234333232323337303933313231392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911031.478:1464): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911031.479:1465): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911031.636:1466): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911031.636:1467): pid=17549 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911031.638:1468): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.638:1469): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.648:1470): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.648:1471): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.649:1472): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.668:1473): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.668:1474): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.815:1475): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.815:1476): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.816:1477): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.833:1478): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.833:1479): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.843:1480): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.843:1481): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.844:1482): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.868:1483): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.868:1484): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911031.967:1485): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911031.967:1486): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911031.967:1487): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911031.994:1488): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911031.994:1489): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.004:1490): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.004:1491): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.005:1492): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.024:1493): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.024:1494): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.034:1495): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.034:1496): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.035:1497): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17651 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911032.061:1498): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911032.061:1499): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72797775796371796475626B70786E6E7179766C726C6E6B7576716466646D61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033312E3833353433332D31373537332D33373933333533303934343630362F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911032.061:1500): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911032.062:1501): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911032.208:1502): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911032.208:1503): pid=17669 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911032.210:1504): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.210:1505): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.220:1506): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.220:1507): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.221:1508): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17676 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.239:1509): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.239:1510): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.392:1511): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.392:1512): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.393:1513): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.411:1514): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.411:1515): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.420:1516): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.420:1517): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.421:1518): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.442:1519): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.442:1520): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.456:1521): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.456:1522): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.457:1523): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.485:1524): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.485:1525): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.494:1526): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.494:1527): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.495:1528): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.516:1529): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.516:1530): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.525:1531): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.525:1532): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.526:1533): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911032.554:1534): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911032.554:1535): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E73736A76767862726C796E617A646D7373696D6870757264667173787A6972203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033322E343133333830392D31373639342D333239323133363439343935332F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911032.555:1536): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911032.556:1537): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911032.704:1538): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911032.704:1539): pid=17790 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911032.706:1540): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.706:1541): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.715:1542): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.715:1543): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.716:1544): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17797 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.735:1545): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.735:1546): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.889:1547): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.889:1548): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.889:1549): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17817 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.907:1550): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.907:1551): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.916:1552): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.916:1553): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.917:1554): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.938:1555): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.938:1556): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.952:1557): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.952:1558): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.953:1559): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17858 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911032.981:1560): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911032.981:1561): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911032.991:1562): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911032.991:1563): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911032.992:1564): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.012:1565): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.012:1566): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.022:1567): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.022:1568): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.023:1569): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17893 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911033.055:1570): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911033.055:1571): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6365696B766C736F727562757771786275666F6377726161696B776B6E6E7A6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033322E393039373939362D31373831352D35313938333632343234313639372F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911033.056:1572): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911033.058:1573): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911033.240:1574): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911033.240:1575): pid=17911 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911033.243:1576): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.243:1577): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.254:1578): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.254:1579): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.255:1580): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.275:1581): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.275:1582): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.555:1583): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.555:1584): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.556:1585): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.575:1586): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.575:1587): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.585:1588): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.585:1589): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.586:1590): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.607:1591): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.607:1592): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.621:1593): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.621:1594): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.622:1595): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.669:1596): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.669:1597): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.679:1598): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.679:1599): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.680:1600): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=17998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911033.699:1601): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.699:1602): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.708:1603): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.708:1604): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.709:1605): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18016 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911033.735:1606): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911033.735:1607): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C6277686264756D726E73766D6D757774737562756666786C6F7774626271203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033332E353737353736322D31373933382D34343533323138383032363839302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911033.736:1608): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911033.737:1609): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911033.986:1610): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911033.986:1611): pid=18034 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911033.987:1612): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911033.987:1613): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911033.996:1614): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911033.996:1615): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911033.997:1616): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.018:1617): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.018:1618): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.168:1619): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.168:1620): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.169:1621): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.187:1622): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.187:1623): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.196:1624): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.196:1625): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.196:1626): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.218:1627): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.218:1628): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.232:1629): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.232:1630): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.233:1631): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.260:1632): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.261:1633): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.270:1634): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.270:1635): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.271:1636): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18117 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.290:1637): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.290:1638): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.300:1639): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.300:1640): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.300:1641): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911034.327:1642): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911034.327:1643): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A786C667A6D757A697675676A687A7672657061787573647366746A6C777677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033342E313839323138332D31383035372D3235333032343634363035323335342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911034.327:1644): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911034.329:1645): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911034.495:1646): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911034.495:1647): pid=18153 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911034.497:1648): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.497:1649): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.507:1650): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.507:1651): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.507:1652): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.526:1653): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.526:1654): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.675:1655): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.675:1656): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.675:1657): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.692:1658): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.692:1659): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.700:1660): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.700:1661): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.701:1662): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18195 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.722:1663): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.722:1664): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.735:1665): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.735:1666): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.736:1667): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.767:1668): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.767:1669): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.776:1670): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.776:1671): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.777:1672): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911034.795:1673): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.795:1674): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.805:1675): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.805:1676): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.805:1677): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911034.832:1678): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911034.832:1679): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E696F6C696D75676D66786868687074786E6E6B696D70706B78726E756D6C7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033342E363934323837332D31383137362D3133333331393939373630323635302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911034.832:1680): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911034.833:1681): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911034.971:1682): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911034.971:1683): pid=18272 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911034.973:1684): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911034.973:1685): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911034.982:1686): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911034.982:1687): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911034.982:1688): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18277 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911035.002:1689): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911035.002:1690): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911035.378:1691): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911035.378:1692): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911035.379:1693): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18301 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911035.396:1694): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911035.396:1695): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911035.405:1696): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911035.405:1697): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911035.406:1698): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911035.426:1699): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911035.426:1700): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911035.440:1701): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911035.440:1702): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911035.441:1703): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911035.468:1704): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911035.468:1705): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911035.477:1706): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911035.477:1707): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911035.478:1708): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911035.497:1709): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911035.497:1710): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911035.506:1711): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911035.506:1712): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911035.507:1713): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911035.533:1714): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911035.533:1715): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D7870727874627462766E7065646E6B61696A6E706D68646E676F79716F66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033352E333938363430322D31383239392D31363132363235353730363036322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911035.533:1716): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911035.534:1717): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911036.043:1718): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911036.044:1719): pid=18395 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911036.046:1720): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.046:1721): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.055:1722): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.055:1723): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.056:1724): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911036.075:1725): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.075:1726): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.239:1727): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.239:1728): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.240:1729): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911036.260:1730): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.260:1731): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.269:1732): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.269:1733): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.270:1734): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911036.293:1735): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.293:1736): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.418:1737): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.418:1738): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.419:1739): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18465 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911036.449:1740): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.449:1741): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.459:1742): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.460:1743): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.460:1744): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911036.479:1745): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911036.479:1746): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911036.491:1747): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911036.491:1748): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911036.492:1749): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=18500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911036.521:1750): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911036.521:1751): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79656C6A6A726A64666467666A686F6A676A6A72677972766B7A6B6975796971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313033362E323632373535392D31383432322D3230313533303331323039393132382F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911036.521:1752): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911036.523:1753): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_CONFIG_CHANGE msg=audit(1749911044.788:1754): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=26AUID="rocky"
type=SYSCALL msg=audit(1749911044.788:1754): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffcd6ee11e a2=2 a3=0 items=0 ppid=18566 pid=18567 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911044.788:1754): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1749911053.940:1755): auid=1000 ses=26 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1749911053.940:1755): arch=c000003e syscall=1 success=yes exit=3613259 a0=4 a1=7fe456a00000 a2=37224b a3=0 items=0 ppid=18566 pid=18580 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=26 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911053.940:1755): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1749911055.182:1756): pid=18589 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=GRP_MGMT msg=audit(1749911055.186:1757): pid=18589 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=SERVICE_START msg=audit(1749911067.478:1758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rca31f5a6839d483489da6ab69d41ed57 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749911067.646:1759): prog-id=77 op=LOAD
type=BPF msg=audit(1749911067.646:1760): prog-id=78 op=LOAD
type=BPF msg=audit(1749911067.646:1761): prog-id=65 op=UNLOAD
type=BPF msg=audit(1749911067.646:1762): prog-id=66 op=UNLOAD
type=BPF msg=audit(1749911067.646:1763): prog-id=79 op=LOAD
type=BPF msg=audit(1749911067.646:1764): prog-id=67 op=UNLOAD
type=BPF msg=audit(1749911067.647:1765): prog-id=80 op=LOAD
type=BPF msg=audit(1749911067.647:1766): prog-id=68 op=UNLOAD
type=BPF msg=audit(1749911067.648:1767): prog-id=81 op=LOAD
type=BPF msg=audit(1749911067.648:1768): prog-id=82 op=LOAD
type=BPF msg=audit(1749911067.648:1769): prog-id=69 op=UNLOAD
type=BPF msg=audit(1749911067.648:1770): prog-id=70 op=UNLOAD
type=BPF msg=audit(1749911067.648:1771): prog-id=83 op=LOAD
type=BPF msg=audit(1749911067.648:1772): prog-id=71 op=UNLOAD
type=BPF msg=audit(1749911067.648:1773): prog-id=84 op=LOAD
type=BPF msg=audit(1749911067.648:1774): prog-id=85 op=LOAD
type=BPF msg=audit(1749911067.648:1775): prog-id=72 op=UNLOAD
type=BPF msg=audit(1749911067.648:1776): prog-id=73 op=UNLOAD
type=BPF msg=audit(1749911067.649:1777): prog-id=86 op=LOAD
type=BPF msg=audit(1749911067.649:1778): prog-id=74 op=UNLOAD
type=BPF msg=audit(1749911067.651:1779): prog-id=87 op=LOAD
type=BPF msg=audit(1749911067.651:1780): prog-id=88 op=LOAD
type=BPF msg=audit(1749911067.651:1781): prog-id=75 op=UNLOAD
type=BPF msg=audit(1749911067.651:1782): prog-id=76 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1783): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-buildx-plugin-0:0.24.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1784): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-compose-plugin-0:2.36.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1785): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1786): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.232.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1787): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containerd.io-1.7.27-3.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1788): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-cli-1:28.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1789): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-libs-1.8.10-4.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1790): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-1.8.10-4.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1791): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1792): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.3.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1793): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1794): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1795): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.14-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1796): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-3:25.0.3-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911067.671:1797): pid=18520 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-rootless-extras-0:28.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749911068.239:1798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911068.239:1799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911068.267:1800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rca31f5a6839d483489da6ab69d41ed57 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911068.285:1801): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911068.286:1802): pid=18518 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911068.289:1803): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.289:1804): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.299:1805): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.299:1806): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.300:1807): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911068.318:1808): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.318:1809): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.457:1810): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.457:1811): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.457:1812): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911068.475:1813): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.475:1814): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.485:1815): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.485:1816): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.486:1817): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20347 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911068.507:1818): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.507:1819): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.521:1820): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.521:1821): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.522:1822): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911068.553:1823): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.553:1824): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.564:1825): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.564:1826): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.565:1827): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911068.586:1828): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911068.586:1829): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911068.598:1830): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911068.598:1831): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911068.599:1832): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911068.626:1833): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911068.626:1834): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D70776A796B6B61657961686D746B616274696578716D7468697170627867203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313036382E343738303234322D32303332382D37333437393336373138383039312F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911068.627:1835): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911068.629:1836): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911070.100:1837): prog-id=89 op=LOAD
type=BPF msg=audit(1749911070.100:1838): prog-id=90 op=LOAD
type=BPF msg=audit(1749911070.100:1839): prog-id=77 op=UNLOAD
type=BPF msg=audit(1749911070.100:1840): prog-id=78 op=UNLOAD
type=BPF msg=audit(1749911070.101:1841): prog-id=91 op=LOAD
type=BPF msg=audit(1749911070.101:1842): prog-id=79 op=UNLOAD
type=BPF msg=audit(1749911070.102:1843): prog-id=92 op=LOAD
type=BPF msg=audit(1749911070.102:1844): prog-id=80 op=UNLOAD
type=BPF msg=audit(1749911070.102:1845): prog-id=93 op=LOAD
type=BPF msg=audit(1749911070.102:1846): prog-id=94 op=LOAD
type=BPF msg=audit(1749911070.102:1847): prog-id=81 op=UNLOAD
type=BPF msg=audit(1749911070.102:1848): prog-id=82 op=UNLOAD
type=BPF msg=audit(1749911070.103:1849): prog-id=95 op=LOAD
type=BPF msg=audit(1749911070.103:1850): prog-id=83 op=UNLOAD
type=BPF msg=audit(1749911070.103:1851): prog-id=96 op=LOAD
type=BPF msg=audit(1749911070.103:1852): prog-id=97 op=LOAD
type=BPF msg=audit(1749911070.103:1853): prog-id=84 op=UNLOAD
type=BPF msg=audit(1749911070.103:1854): prog-id=85 op=UNLOAD
type=BPF msg=audit(1749911070.104:1855): prog-id=98 op=LOAD
type=BPF msg=audit(1749911070.104:1856): prog-id=86 op=UNLOAD
type=BPF msg=audit(1749911070.107:1857): prog-id=99 op=LOAD
type=BPF msg=audit(1749911070.107:1858): prog-id=100 op=LOAD
type=BPF msg=audit(1749911070.107:1859): prog-id=87 op=UNLOAD
type=BPF msg=audit(1749911070.107:1860): prog-id=88 op=UNLOAD
type=SERVICE_START msg=audit(1749911070.142:1861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbf7f8dbd3b6045f9badf585624efa5d8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1749911070.159:1862): pid=20426 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cloud-init-23.4-19.el9.0.2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911070.159:1863): pid=20426 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cockpit-system-323.1-1.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911070.159:1864): pid=20426 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="sos-4.7.2-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911070.159:1865): pid=20426 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="nfs-utils-1:2.5.4-27.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911070.159:1866): pid=20426 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="python3-pyyaml-5.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911070.530:1867): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911070.530:1868): pid=20424 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911070.534:1869): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.534:1870): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911070.544:1871): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.544:1872): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.545:1873): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911070.565:1874): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.565:1875): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1749911070.599:1876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911070.599:1877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911070.612:1878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbf7f8dbd3b6045f9badf585624efa5d8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1749911070.736:1879): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.736:1880): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.737:1881): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911070.755:1882): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.755:1883): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911070.764:1884): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.764:1885): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.765:1886): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20745 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911070.787:1887): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.787:1888): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911070.801:1889): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.801:1890): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.802:1891): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911070.831:1892): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.831:1893): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911070.842:1894): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.842:1895): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.842:1896): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911070.864:1897): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911070.864:1898): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911070.874:1899): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911070.874:1900): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911070.875:1901): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911070.903:1902): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911070.904:1903): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707472666E736778627969766A6872737564666864696D7968666F7766736D78203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037302E373537333535352D32303732352D3139363330343835333832353239382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911070.904:1904): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911070.907:1905): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911071.544:1906): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911071.544:1907): pid=20822 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911071.546:1908): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.546:1909): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.558:1910): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.558:1911): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.558:1912): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911071.578:1913): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.578:1914): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.714:1915): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.714:1916): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.715:1917): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911071.734:1918): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.734:1919): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.743:1920): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.743:1921): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.744:1922): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911071.765:1923): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.765:1924): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.779:1925): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.779:1926): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.780:1927): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911071.809:1928): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.809:1929): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.820:1930): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.820:1931): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.821:1932): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911071.842:1933): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911071.842:1934): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911071.853:1935): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911071.853:1936): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911071.854:1937): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20925 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911071.882:1938): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911071.882:1939): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C76747A6D626C727874656C62686178706D6B716B736A72657978766F6C7378203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037312E373336313035342D32303834372D3131323830343037393531373239372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911071.883:1940): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911071.884:1941): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911075.973:1942): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911075.973:1943): pid=20943 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911075.976:1944): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911075.976:1945): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911075.985:1946): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911075.985:1947): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911075.986:1948): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.006:1949): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.006:1950): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.261:1951): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.261:1952): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.262:1953): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.280:1954): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.280:1955): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.290:1956): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.290:1957): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.291:1958): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=20999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.312:1959): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.312:1960): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.325:1961): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.325:1962): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.326:1963): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.354:1964): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.354:1965): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.363:1966): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.363:1967): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.364:1968): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.382:1969): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.382:1970): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.391:1971): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.391:1972): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.392:1973): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911076.418:1974): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911076.418:1975): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7668696C726A747669636F65796F7765696D6A6F787766746A7977706470796E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037362E323832313237362D32303938302D3132363834303330333237353438362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911076.418:1976): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911076.420:1977): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911076.561:1978): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911076.561:1979): pid=21076 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911076.563:1980): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.563:1981): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.573:1982): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.573:1983): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.573:1984): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.592:1985): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.592:1986): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.747:1987): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.747:1988): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.747:1989): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.765:1990): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.765:1991): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.774:1992): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.774:1993): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.775:1994): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21117 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.796:1995): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.796:1996): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.810:1997): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.810:1998): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.810:1999): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.839:2000): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.839:2001): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.848:2002): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.848:2003): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.849:2004): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911076.868:2005): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911076.868:2006): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911076.877:2007): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911076.877:2008): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911076.878:2009): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911076.904:2010): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911076.904:2011): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A6B70776F64656864796F7365646E6162667A64676B6A676D6E7761776573203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037362E373637363334362D32313039382D3232343839333635323336343633332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911076.904:2012): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911076.906:2013): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911077.051:2014): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911077.051:2015): pid=21194 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911077.053:2016): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.053:2017): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.063:2018): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.063:2019): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.064:2020): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.084:2021): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.084:2022): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.247:2023): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.247:2024): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.248:2025): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.268:2026): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.268:2027): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.279:2028): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.279:2029): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.280:2030): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.306:2031): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.306:2032): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.320:2033): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.320:2034): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.321:2035): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21259 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.349:2036): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.349:2037): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.360:2038): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.360:2039): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.361:2040): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.380:2041): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.380:2042): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.389:2043): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.389:2044): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.390:2045): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21294 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911077.417:2046): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911077.417:2047): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A737069797161617A676C7A656D7A6D68676973716C6B6B6971736F6B656A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037372E323730363234322D32313231362D32383437303339303534363336362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911077.417:2048): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911077.419:2049): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911077.607:2050): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911077.607:2051): pid=21312 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911077.609:2052): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.609:2053): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911077.620:2054): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911077.620:2055): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911077.621:2056): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911077.641:2057): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911077.641:2058): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.234:2059): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.234:2060): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.235:2061): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.253:2062): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.253:2063): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.262:2064): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.262:2065): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.263:2066): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.285:2067): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.285:2068): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.300:2069): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.300:2070): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.300:2071): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.328:2072): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.328:2073): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.338:2074): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.338:2075): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.339:2076): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.361:2077): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.361:2078): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.370:2079): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.370:2080): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.371:2081): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911078.399:2082): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911078.399:2083): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D686A6761676C636668756F6B7565697466626C796D6A7A70696A6F70766568203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037382E323535343933342D32313334312D3135373835313932343533323536332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911078.399:2084): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911078.401:2085): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911078.546:2086): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911078.546:2087): pid=21437 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911078.548:2088): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.548:2089): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.561:2090): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.561:2091): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.562:2092): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.581:2093): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.581:2094): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.590:2095): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.590:2096): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.591:2097): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.610:2098): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.610:2099): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.711:2100): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.711:2101): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.712:2102): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.740:2103): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.740:2104): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.750:2105): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.750:2106): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.751:2107): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911078.769:2108): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911078.769:2109): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911078.779:2110): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911078.779:2111): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911078.780:2112): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911078.807:2113): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911078.807:2114): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A687866716D656A6866716164787371796A71746E646979706675756E636363203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037382E323535343933342D32313334312D3135373835313932343533323536332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911078.807:2115): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911078.808:2116): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911078.997:2117): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911078.998:2118): pid=21533 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911079.000:2119): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.000:2120): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.009:2121): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.009:2122): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.010:2123): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.030:2124): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.030:2125): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.184:2126): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.185:2127): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.185:2128): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.204:2129): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.204:2130): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.213:2131): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.213:2132): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.214:2133): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.237:2134): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.237:2135): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.250:2136): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.250:2137): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.251:2138): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.280:2139): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.280:2140): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.290:2141): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.290:2142): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.290:2143): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.310:2144): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.310:2145): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.319:2146): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.319:2147): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.320:2148): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911079.351:2149): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911079.351:2150): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6364746565666D62796F6B6272797166627274616D646D6371696E656C7572203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037392E3230363339332D32313535352D39303034333334353536363636332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911079.351:2151): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911079.353:2152): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911079.608:2153): prog-id=101 op=LOAD
type=BPF msg=audit(1749911079.608:2154): prog-id=102 op=LOAD
type=BPF msg=audit(1749911079.608:2155): prog-id=89 op=UNLOAD
type=BPF msg=audit(1749911079.608:2156): prog-id=90 op=UNLOAD
type=BPF msg=audit(1749911079.608:2157): prog-id=103 op=LOAD
type=BPF msg=audit(1749911079.608:2158): prog-id=91 op=UNLOAD
type=BPF msg=audit(1749911079.609:2159): prog-id=104 op=LOAD
type=BPF msg=audit(1749911079.609:2160): prog-id=92 op=UNLOAD
type=BPF msg=audit(1749911079.610:2161): prog-id=105 op=LOAD
type=BPF msg=audit(1749911079.610:2162): prog-id=106 op=LOAD
type=BPF msg=audit(1749911079.610:2163): prog-id=93 op=UNLOAD
type=BPF msg=audit(1749911079.610:2164): prog-id=94 op=UNLOAD
type=BPF msg=audit(1749911079.610:2165): prog-id=107 op=LOAD
type=BPF msg=audit(1749911079.610:2166): prog-id=95 op=UNLOAD
type=BPF msg=audit(1749911079.610:2167): prog-id=108 op=LOAD
type=BPF msg=audit(1749911079.610:2168): prog-id=109 op=LOAD
type=BPF msg=audit(1749911079.610:2169): prog-id=96 op=UNLOAD
type=BPF msg=audit(1749911079.610:2170): prog-id=97 op=UNLOAD
type=BPF msg=audit(1749911079.611:2171): prog-id=110 op=LOAD
type=BPF msg=audit(1749911079.611:2172): prog-id=98 op=UNLOAD
type=BPF msg=audit(1749911079.613:2173): prog-id=111 op=LOAD
type=BPF msg=audit(1749911079.613:2174): prog-id=112 op=LOAD
type=BPF msg=audit(1749911079.613:2175): prog-id=99 op=UNLOAD
type=BPF msg=audit(1749911079.613:2176): prog-id=100 op=UNLOAD
type=USER_END msg=audit(1749911079.634:2177): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911079.634:2178): pid=21651 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911079.637:2179): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.637:2180): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.646:2181): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.646:2182): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.647:2183): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.668:2184): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.668:2185): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.824:2186): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.824:2187): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.824:2188): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21697 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.842:2189): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.842:2190): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.850:2191): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.850:2192): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.851:2193): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.872:2194): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.873:2195): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.886:2196): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.886:2197): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.887:2198): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.924:2199): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.924:2200): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.934:2201): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.934:2202): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.935:2203): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911079.954:2204): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911079.954:2205): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911079.963:2206): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911079.964:2207): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911079.964:2208): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=21773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911079.992:2209): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911079.992:2210): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A77746C67686163746A6C6A6276727663786B6271617A66757471667A6862203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313037392E383434323839332D32313639352D3232383333393839373133383735312F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911079.993:2211): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911079.995:2212): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911080.378:2213): prog-id=113 op=LOAD
type=BPF msg=audit(1749911080.378:2214): prog-id=114 op=LOAD
type=BPF msg=audit(1749911080.378:2215): prog-id=101 op=UNLOAD
type=BPF msg=audit(1749911080.378:2216): prog-id=102 op=UNLOAD
type=BPF msg=audit(1749911080.379:2217): prog-id=115 op=LOAD
type=BPF msg=audit(1749911080.379:2218): prog-id=103 op=UNLOAD
type=BPF msg=audit(1749911080.380:2219): prog-id=116 op=LOAD
type=BPF msg=audit(1749911080.380:2220): prog-id=104 op=UNLOAD
type=BPF msg=audit(1749911080.380:2221): prog-id=117 op=LOAD
type=BPF msg=audit(1749911080.380:2222): prog-id=118 op=LOAD
type=BPF msg=audit(1749911080.380:2223): prog-id=105 op=UNLOAD
type=BPF msg=audit(1749911080.380:2224): prog-id=106 op=UNLOAD
type=BPF msg=audit(1749911080.381:2225): prog-id=119 op=LOAD
type=BPF msg=audit(1749911080.381:2226): prog-id=107 op=UNLOAD
type=BPF msg=audit(1749911080.381:2227): prog-id=120 op=LOAD
type=BPF msg=audit(1749911080.381:2228): prog-id=121 op=LOAD
type=BPF msg=audit(1749911080.381:2229): prog-id=108 op=UNLOAD
type=BPF msg=audit(1749911080.381:2230): prog-id=109 op=UNLOAD
type=BPF msg=audit(1749911080.382:2231): prog-id=122 op=LOAD
type=BPF msg=audit(1749911080.382:2232): prog-id=110 op=UNLOAD
type=BPF msg=audit(1749911080.384:2233): prog-id=123 op=LOAD
type=BPF msg=audit(1749911080.384:2234): prog-id=124 op=LOAD
type=BPF msg=audit(1749911080.384:2235): prog-id=111 op=UNLOAD
type=BPF msg=audit(1749911080.384:2236): prog-id=112 op=UNLOAD
type=BPF msg=audit(1749911080.386:2237): prog-id=125 op=LOAD
type=BPF msg=audit(1749911080.386:2238): prog-id=126 op=LOAD
type=BPF msg=audit(1749911080.386:2239): prog-id=123 op=UNLOAD
type=BPF msg=audit(1749911080.386:2240): prog-id=124 op=UNLOAD
type=SERVICE_START msg=audit(1749911080.516:2241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1749911081.477:2242): table=filter family=2 entries=0 op=xt_register pid=22109 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911081.477:2242): arch=c000003e syscall=175 success=yes exit=0 a0=55cc8a068ca0 a1=35e6 a2=55cc89b20962 a3=5 items=0 ppid=42 pid=22109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.477:2242): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1749911081.515:2243): table=nat family=2 entries=0 op=xt_register pid=22113 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911081.515:2243): arch=c000003e syscall=175 success=yes exit=0 a0=558fafbd2450 a1=3bfe a2=558fae0b4962 a3=5 items=0 ppid=42 pid=22113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.515:2243): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174
type=NETFILTER_CFG msg=audit(1749911081.532:2244): table=nat family=2 entries=5 op=xt_replace pid=22129 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.532:2244): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55de4a78aa80 items=0 ppid=21834 pid=22129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.532:2244): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1749911081.533:2245): table=filter family=2 entries=4 op=xt_replace pid=22131 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.533:2245): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556266a2e960 items=0 ppid=21834 pid=22131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.533:2245): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1749911081.535:2246): table=filter family=2 entries=6 op=xt_replace pid=22133 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.535:2246): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56524175db50 items=0 ppid=21834 pid=22133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.535:2246): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1749911081.537:2247): table=filter family=2 entries=8 op=xt_replace pid=22135 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.537:2247): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fcb035ad30 items=0 ppid=21834 pid=22135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.537:2247): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1749911081.538:2248): table=filter family=2 entries=10 op=xt_replace pid=22137 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.538:2248): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c8bd33c5a0 items=0 ppid=21834 pid=22137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.538:2248): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911081.540:2249): table=filter family=2 entries=11 op=xt_replace pid=22139 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.540:2249): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fa24569720 items=0 ppid=21834 pid=22139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.540:2249): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911081.541:2250): table=filter family=2 entries=12 op=xt_replace pid=22140 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.541:2250): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564752444120 items=0 ppid=21834 pid=22140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.541:2250): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D5000464F52574152440044524F50
type=NETFILTER_CFG msg=audit(1749911081.556:2251): table=filter family=2 entries=12 op=xt_replace pid=22142 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.556:2251): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5633d6d4b1e0 items=0 ppid=21834 pid=22142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.556:2251): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1749911081.558:2252): table=filter family=2 entries=14 op=xt_replace pid=22144 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.558:2252): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a88ba94a70 items=0 ppid=21834 pid=22144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.558:2252): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911081.560:2253): table=filter family=2 entries=15 op=xt_replace pid=22146 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.560:2253): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f20aa16bf0 items=0 ppid=21834 pid=22146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.560:2253): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1749911081.569:2254): table=filter family=2 entries=16 op=xt_replace pid=22150 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.569:2254): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558a388b0e10 items=0 ppid=21834 pid=22150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.569:2254): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1749911081.570:2255): table=filter family=2 entries=15 op=xt_replace pid=22151 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.570:2255): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d0d89cabf0 items=0 ppid=21834 pid=22151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.570:2255): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1749911081.591:2256): table=nat family=2 entries=7 op=xt_replace pid=22158 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.591:2256): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55575a5c7990 items=0 ppid=21834 pid=22158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.591:2256): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1749911081.594:2257): table=nat family=2 entries=8 op=xt_replace pid=22161 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.594:2257): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559e887b84b0 items=0 ppid=21834 pid=22161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.594:2257): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911081.598:2258): table=filter family=2 entries=16 op=xt_replace pid=22165 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.598:2258): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5589deedfd60 items=0 ppid=21834 pid=22165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.598:2258): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1749911081.600:2259): table=filter family=2 entries=17 op=xt_replace pid=22167 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.600:2259): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cca43f5ed0 items=0 ppid=21834 pid=22167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.600:2259): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1749911081.602:2260): table=nat family=2 entries=9 op=xt_replace pid=22169 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.602:2260): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562e0cbd8330 items=0 ppid=21834 pid=22169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.602:2260): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1749911081.605:2261): table=nat family=2 entries=10 op=xt_replace pid=22171 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.605:2261): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cdee330500 items=0 ppid=21834 pid=22171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.605:2261): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1749911081.607:2262): table=filter family=2 entries=18 op=xt_replace pid=22173 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.607:2262): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562c6cf51050 items=0 ppid=21834 pid=22173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.607:2262): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1749911081.616:2263): table=filter family=2 entries=19 op=xt_replace pid=22176 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.616:2263): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561ee4fb81d0 items=0 ppid=21834 pid=22176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.616:2263): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054
type=NETFILTER_CFG msg=audit(1749911081.618:2264): table=filter family=2 entries=20 op=xt_replace pid=22178 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.618:2264): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563b16a3a4f0 items=0 ppid=21834 pid=22178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.618:2264): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1749911081.621:2265): table=filter family=2 entries=21 op=xt_replace pid=22180 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.621:2265): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cfda298670 items=0 ppid=21834 pid=22180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.621:2265): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1749911081.623:2266): table=filter family=2 entries=22 op=xt_replace pid=22182 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.623:2266): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f24e94c7c0 items=0 ppid=21834 pid=22182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.623:2266): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1749911081.635:2267): table=filter family=2 entries=23 op=xt_replace pid=22187 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.635:2267): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f2596f99f0 items=0 ppid=21834 pid=22187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.635:2267): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1749911081.636:2268): table=filter family=2 entries=22 op=xt_replace pid=22188 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911081.636:2268): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d77ddf17d0 items=0 ppid=21834 pid=22188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911081.636:2268): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=SERVICE_START msg=audit(1749911081.647:2269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911081.709:2270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911081.729:2271): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911081.729:2272): pid=21791 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911081.732:2273): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911081.732:2274): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911081.741:2275): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911081.741:2276): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911081.742:2277): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911081.761:2278): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911081.761:2279): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.018:2280): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.018:2281): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.019:2282): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911082.037:2283): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.037:2284): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.046:2285): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.046:2286): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.047:2287): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22268 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911082.069:2288): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.069:2289): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.083:2290): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.083:2291): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.083:2292): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911082.122:2293): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.122:2294): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.132:2295): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.132:2296): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.133:2297): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911082.151:2298): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.151:2299): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.161:2300): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.161:2301): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.162:2302): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911082.190:2303): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911082.190:2304): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A72797463656968786B6B6F6A78626E75716374716A76716467736672716E6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313038322E303339323134312D32323234392D3233353838313935373730333439332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911082.191:2305): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911082.193:2306): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911082.473:2307): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911082.473:2308): pid=22345 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911082.476:2309): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.476:2310): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911082.486:2311): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911082.486:2312): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911082.487:2313): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911082.509:2314): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911082.509:2315): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911088.923:2316): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911088.923:2317): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911088.924:2318): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22581 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911088.942:2319): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911088.942:2320): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911088.951:2321): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911088.951:2322): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911088.952:2323): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911088.975:2324): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911088.975:2325): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.194:2326): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.194:2327): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.195:2328): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911089.214:2329): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.214:2330): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.223:2331): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.224:2332): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.224:2333): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911089.267:2334): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.267:2335): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.281:2336): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.281:2337): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.282:2338): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911089.319:2339): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.319:2340): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.329:2341): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.329:2342): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.329:2343): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22676 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911089.348:2344): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.348:2345): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.357:2346): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.357:2347): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.358:2348): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911089.384:2349): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911089.384:2350): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6575697371787165666B69756F6574646F61616A616E6F6C66646A76766C756D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313038382E393433393832312D32323537392D353232323832353430343738322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911089.384:2351): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911089.386:2352): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911089.930:2353): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911089.930:2354): pid=22712 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911089.933:2355): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.933:2356): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911089.945:2357): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911089.945:2358): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911089.946:2359): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22753 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911089.965:2360): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911089.965:2361): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.097:2362): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.097:2363): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.098:2364): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.117:2365): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.117:2366): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.127:2367): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.127:2368): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.127:2369): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.151:2370): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.151:2371): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.253:2372): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.253:2373): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.254:2374): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.281:2375): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.281:2376): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.291:2377): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.291:2378): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.292:2379): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.310:2380): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.310:2381): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.319:2382): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.319:2383): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.320:2384): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911091.345:2385): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911091.345:2386): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727276796F727469746C776B7876666E706B617263686877727A6D7869746376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313039312E313138323331352D32323738392D3139373130353436303833333232362F416E736962616C6C5A5F79756D5F7265706F7369746F72792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911091.346:2387): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911091.347:2388): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911091.488:2389): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911091.488:2390): pid=22885 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911091.490:2391): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.490:2392): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.499:2393): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.500:2394): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.500:2395): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.520:2396): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.520:2397): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1749911091.666:2398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1749911091.737:2399): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.737:2400): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.738:2401): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22911 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.756:2402): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.757:2403): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.765:2404): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.765:2405): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.766:2406): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.787:2407): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.788:2408): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.885:2409): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.885:2410): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.886:2411): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.916:2412): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.916:2413): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.926:2414): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.926:2415): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.927:2416): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911091.945:2417): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911091.945:2418): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911091.954:2419): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911091.954:2420): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911091.955:2421): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=22987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911091.982:2422): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911091.982:2423): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D666F6E746E73716375776E6B62666A6F636F6971726B706F796E74616B6F6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313039312E373537383733382D32323930392D3236323731363536393532373639322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911091.983:2424): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911091.984:2425): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911092.464:2426): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911092.464:2427): pid=23005 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911092.467:2428): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.467:2429): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.476:2430): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.476:2431): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.477:2432): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911092.497:2433): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.497:2434): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.691:2435): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.691:2436): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.692:2437): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911092.710:2438): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.710:2439): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.718:2440): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.718:2441): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.719:2442): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911092.741:2443): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.741:2444): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.838:2445): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.838:2446): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.839:2447): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911092.866:2448): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.866:2449): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.877:2450): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.877:2451): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.877:2452): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911092.895:2453): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911092.895:2454): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911092.905:2455): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911092.905:2456): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911092.906:2457): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911092.932:2458): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911092.932:2459): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65636D7A76766561726A6A756B646A7768696B706171646F6C6B6D6C6B6D6A64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313039322E373131333633382D32333033312D3232363235383334363032383639352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911092.932:2460): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911092.934:2461): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911093.120:2462): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911093.120:2463): pid=23127 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911093.123:2464): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.123:2465): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.135:2466): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.135:2467): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.136:2468): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911093.156:2469): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.156:2470): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.383:2471): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.383:2472): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.384:2473): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911093.403:2474): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.403:2475): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.411:2476): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.411:2477): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.412:2478): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23170 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911093.434:2479): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.434:2480): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.561:2481): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.561:2482): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.562:2483): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911093.591:2484): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.591:2485): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.601:2486): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.601:2487): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.602:2488): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911093.621:2489): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911093.621:2490): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911093.631:2491): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911093.631:2492): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911093.632:2493): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911093.659:2494): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911093.659:2495): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78666D6F72747A6B737A6D6A796E6F687874637666616863676278726777637A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313039332E3430343139312D32333135312D33333237373639363734363931322F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911093.659:2496): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911093.661:2497): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911095.908:2498): pid=23249 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubectl-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911096.267:2499): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911096.267:2500): pid=23247 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911096.269:2501): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.270:2502): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.279:2503): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.279:2504): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.280:2505): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911096.300:2506): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.300:2507): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.417:2508): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.417:2509): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.418:2510): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911096.437:2511): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.437:2512): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.447:2513): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.447:2514): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.448:2515): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23289 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911096.471:2516): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.471:2517): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.487:2518): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.487:2519): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.488:2520): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911096.520:2521): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.520:2522): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.532:2523): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.532:2524): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.533:2525): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911096.552:2526): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911096.552:2527): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911096.562:2528): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911096.562:2529): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911096.563:2530): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23348 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911096.591:2531): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911096.591:2532): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F73716D70616B7473776873736A6B686D77646662696679776A78797A6262203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313039362E3433393038392D32333135312D3230373130313231333339393632322F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911096.591:2533): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911096.593:2534): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1749911103.239:2535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4e5113cdcf134cffb357c44825c0d091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749911103.385:2536): prog-id=127 op=LOAD
type=BPF msg=audit(1749911103.385:2537): prog-id=128 op=LOAD
type=BPF msg=audit(1749911103.385:2538): prog-id=113 op=UNLOAD
type=BPF msg=audit(1749911103.385:2539): prog-id=114 op=UNLOAD
type=BPF msg=audit(1749911103.386:2540): prog-id=129 op=LOAD
type=BPF msg=audit(1749911103.386:2541): prog-id=115 op=UNLOAD
type=BPF msg=audit(1749911103.387:2542): prog-id=130 op=LOAD
type=BPF msg=audit(1749911103.387:2543): prog-id=116 op=UNLOAD
type=BPF msg=audit(1749911103.387:2544): prog-id=131 op=LOAD
type=BPF msg=audit(1749911103.387:2545): prog-id=132 op=LOAD
type=BPF msg=audit(1749911103.387:2546): prog-id=117 op=UNLOAD
type=BPF msg=audit(1749911103.387:2547): prog-id=118 op=UNLOAD
type=BPF msg=audit(1749911103.388:2548): prog-id=133 op=LOAD
type=BPF msg=audit(1749911103.388:2549): prog-id=119 op=UNLOAD
type=BPF msg=audit(1749911103.388:2550): prog-id=134 op=LOAD
type=BPF msg=audit(1749911103.388:2551): prog-id=135 op=LOAD
type=BPF msg=audit(1749911103.388:2552): prog-id=120 op=UNLOAD
type=BPF msg=audit(1749911103.388:2553): prog-id=121 op=UNLOAD
type=BPF msg=audit(1749911103.389:2554): prog-id=136 op=LOAD
type=BPF msg=audit(1749911103.389:2555): prog-id=122 op=UNLOAD
type=BPF msg=audit(1749911103.391:2556): prog-id=137 op=LOAD
type=BPF msg=audit(1749911103.391:2557): prog-id=138 op=LOAD
type=BPF msg=audit(1749911103.391:2558): prog-id=125 op=UNLOAD
type=BPF msg=audit(1749911103.392:2559): prog-id=126 op=UNLOAD
type=SERVICE_START msg=audit(1749911103.430:2560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1db83f0b507146b5acf81fd3ebf9a5eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2561): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-libs-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2562): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-legacy-libs-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2563): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="socat-1.7.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2564): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_queue-1.0.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2565): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cttimeout-1.0.0-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2566): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cthelper-1.0.0-22.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2567): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conntrack-tools-1.4.7-4.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2568): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.6-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2569): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2570): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubernetes-cni-1.2.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2571): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubelet-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911103.436:2572): pid=23368 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-legacy-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749911103.886:2573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911103.886:2574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911103.887:2575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1db83f0b507146b5acf81fd3ebf9a5eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911103.887:2576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4e5113cdcf134cffb357c44825c0d091 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911104.067:2577): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911104.067:2578): pid=23366 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911104.070:2579): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.070:2580): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.081:2581): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.081:2582): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.082:2583): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911104.105:2584): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.105:2585): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.186:2586): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.186:2587): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.187:2588): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911104.210:2589): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.210:2590): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.220:2591): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.220:2592): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.221:2593): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911104.247:2594): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.247:2595): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.261:2596): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.261:2597): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.261:2598): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911104.292:2599): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.292:2600): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.302:2601): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.302:2602): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.303:2603): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911104.321:2604): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911104.321:2605): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911104.331:2606): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911104.331:2607): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911104.332:2608): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23774 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911104.359:2609): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911104.359:2610): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69776D686F696B6F63736F696B6B62657975626C6B627770747267716E617472203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313130342E323132383838372D32333135312D3230383236323836353139353932352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911104.360:2611): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911104.362:2612): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911107.753:2613): prog-id=139 op=LOAD
type=BPF msg=audit(1749911107.753:2614): prog-id=140 op=LOAD
type=BPF msg=audit(1749911107.753:2615): prog-id=127 op=UNLOAD
type=BPF msg=audit(1749911107.753:2616): prog-id=128 op=UNLOAD
type=BPF msg=audit(1749911107.754:2617): prog-id=141 op=LOAD
type=BPF msg=audit(1749911107.754:2618): prog-id=129 op=UNLOAD
type=BPF msg=audit(1749911107.755:2619): prog-id=142 op=LOAD
type=BPF msg=audit(1749911107.755:2620): prog-id=130 op=UNLOAD
type=BPF msg=audit(1749911107.755:2621): prog-id=143 op=LOAD
type=BPF msg=audit(1749911107.755:2622): prog-id=144 op=LOAD
type=BPF msg=audit(1749911107.755:2623): prog-id=131 op=UNLOAD
type=BPF msg=audit(1749911107.755:2624): prog-id=132 op=UNLOAD
type=BPF msg=audit(1749911107.756:2625): prog-id=145 op=LOAD
type=BPF msg=audit(1749911107.756:2626): prog-id=133 op=UNLOAD
type=BPF msg=audit(1749911107.756:2627): prog-id=146 op=LOAD
type=BPF msg=audit(1749911107.756:2628): prog-id=147 op=LOAD
type=BPF msg=audit(1749911107.756:2629): prog-id=134 op=UNLOAD
type=BPF msg=audit(1749911107.756:2630): prog-id=135 op=UNLOAD
type=BPF msg=audit(1749911107.757:2631): prog-id=148 op=LOAD
type=BPF msg=audit(1749911107.757:2632): prog-id=136 op=UNLOAD
type=BPF msg=audit(1749911107.759:2633): prog-id=149 op=LOAD
type=BPF msg=audit(1749911107.759:2634): prog-id=150 op=LOAD
type=BPF msg=audit(1749911107.759:2635): prog-id=137 op=UNLOAD
type=BPF msg=audit(1749911107.759:2636): prog-id=138 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1749911107.771:2637): pid=23794 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cri-tools-1.26.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1749911107.772:2638): pid=23794 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubeadm-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-386-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911108.171:2639): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911108.171:2640): pid=23792 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911108.174:2641): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.174:2642): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.184:2643): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.184:2644): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.185:2645): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.203:2646): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.203:2647): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.376:2648): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.376:2649): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.376:2650): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.394:2651): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.394:2652): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.402:2653): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.403:2654): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.403:2655): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.424:2656): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.424:2657): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.438:2658): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.438:2659): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.439:2660): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23885 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.466:2661): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.466:2662): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.476:2663): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.476:2664): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.477:2665): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.497:2666): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.497:2667): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.506:2668): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.506:2669): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.507:2670): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911108.534:2671): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911108.534:2672): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67727762796A69636D7A69716F6461617761727A6B64637478647762646B7363203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313130382E333936333838352D32333834322D3130313331363234343834333236362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911108.535:2673): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911108.537:2674): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749911108.713:2675): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1749911108.713:2676): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D7620636F6E6669672E746F6D6C202F6574632F636F6E7461696E6572642F636F6E6669672E746F6D6C exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1749911108.714:2677): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911108.715:2678): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911108.717:2679): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911108.717:2680): pid=23951 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_ACCT msg=audit(1749911108.726:2681): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1749911108.726:2682): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207265737461727420636F6E7461696E657264 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1749911108.727:2683): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911108.728:2684): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1749911108.738:2685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911108.793:2686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911108.795:2687): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911108.795:2688): pid=23941 uid=0 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911108.809:2689): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911108.809:2690): pid=23938 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911108.812:2691): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.812:2692): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911108.821:2693): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911108.821:2694): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911108.822:2695): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911108.843:2696): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911108.843:2697): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.085:2698): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.085:2699): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.086:2700): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=23992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911109.104:2701): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.104:2702): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.113:2703): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.113:2704): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.114:2705): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911109.134:2706): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.134:2707): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.148:2708): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.148:2709): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.149:2710): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911109.176:2711): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.176:2712): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.186:2713): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.186:2714): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.186:2715): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911109.205:2716): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.205:2717): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.214:2718): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.214:2719): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.215:2720): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911109.241:2721): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911109.241:2722): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A786661646D696677676C64746A6A72797262677A646174626F6A676E797A70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313130392E3130363439322D32333939302D38363434303037333331353336382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911109.242:2723): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911109.244:2724): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911109.430:2725): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911109.430:2726): pid=24086 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911109.432:2727): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.432:2728): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911109.441:2729): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911109.441:2730): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911109.442:2731): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24096 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911109.463:2732): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911109.463:2733): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.128:2734): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.128:2735): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.129:2736): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.147:2737): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.147:2738): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.156:2739): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.156:2740): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.157:2741): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.180:2742): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.180:2743): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.193:2744): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.193:2745): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.194:2746): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.222:2747): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.222:2748): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.232:2749): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.232:2750): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.233:2751): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.252:2752): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.252:2753): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.261:2754): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.261:2755): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.262:2756): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911110.289:2757): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911110.289:2758): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F647A766C65616B77666464786B77776E6767797477626C6771656F736A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131302E3135303032332D32343132322D3135323036383734343234383134322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911110.290:2759): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911110.291:2760): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911110.479:2761): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911110.479:2762): pid=24218 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911110.481:2763): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.481:2764): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.491:2765): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.491:2766): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.491:2767): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.512:2768): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.512:2769): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.913:2770): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.913:2771): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.914:2772): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.932:2773): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.932:2774): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911110.941:2775): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911110.941:2776): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911110.942:2777): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911110.965:2778): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911110.965:2779): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.133:2780): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.133:2781): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.134:2782): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.161:2783): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.161:2784): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.172:2785): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.173:2786): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.174:2787): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.192:2788): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.193:2789): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.203:2790): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.203:2791): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.204:2792): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911111.232:2793): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911111.232:2794): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A616E6E6B6A6A676C62736B7A797963677A6D6775676C7678786567687A61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131302E3933343336352D32343237342D39333030363233353032323838352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911111.233:2795): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911111.234:2796): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911111.370:2797): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911111.370:2798): pid=24370 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911111.372:2799): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.372:2800): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.381:2801): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.381:2802): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.382:2803): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.401:2804): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.401:2805): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.590:2806): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.590:2807): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.591:2808): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.611:2809): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.611:2810): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.619:2811): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.619:2812): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.620:2813): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.642:2814): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.642:2815): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.656:2816): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.656:2817): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.657:2818): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.685:2819): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.685:2820): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.696:2821): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.696:2822): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.696:2823): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.715:2824): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.715:2825): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.724:2826): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.724:2827): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.725:2828): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911111.751:2829): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911111.751:2830): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B776D7962796F6B61676E69706F656779756162676D65756963736E6B7676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131312E363133303831352D32343339322D3230383535303139313738353837342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911111.751:2831): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911111.753:2832): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911111.902:2833): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911111.902:2834): pid=24488 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911111.904:2835): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.905:2836): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911111.914:2837): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911111.914:2838): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911111.915:2839): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911111.934:2840): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911111.934:2841): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.510:2842): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.510:2843): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.511:2844): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911112.530:2845): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.530:2846): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.540:2847): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.540:2848): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.541:2849): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911112.562:2850): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.562:2851): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.576:2852): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.576:2853): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.577:2854): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911112.607:2855): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.607:2856): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.617:2857): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.617:2858): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.618:2859): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24578 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911112.637:2860): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.637:2861): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.647:2862): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.647:2863): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.648:2864): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911112.683:2865): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911112.683:2866): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F796C65656E746C6C716C6A6F6A676A6E66656A6772687A6179716E776E6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131322E353332323239322D32343531382D383335313737303035363130372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911112.683:2867): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911112.685:2868): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911112.830:2869): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911112.830:2870): pid=24614 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911112.833:2871): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.833:2872): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911112.844:2873): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911112.844:2874): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911112.845:2875): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911112.865:2876): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911112.865:2877): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.077:2878): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.077:2879): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.078:2880): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.096:2881): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.096:2882): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.107:2883): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.107:2884): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.108:2885): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.132:2886): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.132:2887): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.145:2888): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.145:2889): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.146:2890): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.175:2891): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.175:2892): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.185:2893): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.185:2894): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.185:2895): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.204:2896): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.204:2897): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.214:2898): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.214:2899): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.215:2900): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911113.242:2901): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911113.242:2902): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7773786C6A70767774626F6A6174706A73686B76796F7A6D79766E716F636B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131332E303938363632312D32343633362D3133313536393633333633343131342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911113.242:2903): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911113.244:2904): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911113.385:2905): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911113.386:2906): pid=24732 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911113.388:2907): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.388:2908): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.397:2909): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.397:2910): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.398:2911): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.419:2912): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.419:2913): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.605:2914): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.605:2915): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.606:2916): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.624:2917): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.624:2918): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.633:2919): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.633:2920): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.634:2921): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.657:2922): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.657:2923): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.895:2924): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.895:2925): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.896:2926): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24797 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.938:2927): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.938:2928): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.950:2929): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.950:2930): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.951:2931): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24814 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911113.971:2932): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911113.971:2933): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911113.981:2934): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911113.981:2935): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911113.982:2936): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911114.009:2937): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911114.010:2938): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C65717769706E7767776A737979636C6E72676D757072736A74747373777A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131332E363236373835382D32343735342D37363135383534313730323430332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911114.010:2939): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911114.011:2940): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1749911114.374:2941): prog-id=151 op=LOAD
type=BPF msg=audit(1749911114.374:2942): prog-id=152 op=LOAD
type=BPF msg=audit(1749911114.374:2943): prog-id=139 op=UNLOAD
type=BPF msg=audit(1749911114.374:2944): prog-id=140 op=UNLOAD
type=BPF msg=audit(1749911114.374:2945): prog-id=153 op=LOAD
type=BPF msg=audit(1749911114.374:2946): prog-id=141 op=UNLOAD
type=BPF msg=audit(1749911114.375:2947): prog-id=154 op=LOAD
type=BPF msg=audit(1749911114.375:2948): prog-id=142 op=UNLOAD
type=BPF msg=audit(1749911114.376:2949): prog-id=155 op=LOAD
type=BPF msg=audit(1749911114.376:2950): prog-id=156 op=LOAD
type=BPF msg=audit(1749911114.376:2951): prog-id=143 op=UNLOAD
type=BPF msg=audit(1749911114.376:2952): prog-id=144 op=UNLOAD
type=BPF msg=audit(1749911114.376:2953): prog-id=157 op=LOAD
type=BPF msg=audit(1749911114.376:2954): prog-id=145 op=UNLOAD
type=BPF msg=audit(1749911114.376:2955): prog-id=158 op=LOAD
type=BPF msg=audit(1749911114.376:2956): prog-id=159 op=LOAD
type=BPF msg=audit(1749911114.376:2957): prog-id=146 op=UNLOAD
type=BPF msg=audit(1749911114.376:2958): prog-id=147 op=UNLOAD
type=BPF msg=audit(1749911114.377:2959): prog-id=160 op=LOAD
type=BPF msg=audit(1749911114.377:2960): prog-id=148 op=UNLOAD
type=BPF msg=audit(1749911114.380:2961): prog-id=161 op=LOAD
type=BPF msg=audit(1749911114.380:2962): prog-id=162 op=LOAD
type=BPF msg=audit(1749911114.380:2963): prog-id=149 op=UNLOAD
type=BPF msg=audit(1749911114.380:2964): prog-id=150 op=UNLOAD
type=BPF msg=audit(1749911114.546:2965): prog-id=163 op=LOAD
type=BPF msg=audit(1749911114.546:2966): prog-id=164 op=LOAD
type=BPF msg=audit(1749911114.546:2967): prog-id=151 op=UNLOAD
type=BPF msg=audit(1749911114.546:2968): prog-id=152 op=UNLOAD
type=BPF msg=audit(1749911114.547:2969): prog-id=165 op=LOAD
type=BPF msg=audit(1749911114.547:2970): prog-id=153 op=UNLOAD
type=BPF msg=audit(1749911114.548:2971): prog-id=166 op=LOAD
type=BPF msg=audit(1749911114.549:2972): prog-id=154 op=UNLOAD
type=BPF msg=audit(1749911114.549:2973): prog-id=167 op=LOAD
type=BPF msg=audit(1749911114.549:2974): prog-id=168 op=LOAD
type=BPF msg=audit(1749911114.549:2975): prog-id=155 op=UNLOAD
type=BPF msg=audit(1749911114.549:2976): prog-id=156 op=UNLOAD
type=BPF msg=audit(1749911114.549:2977): prog-id=169 op=LOAD
type=BPF msg=audit(1749911114.550:2978): prog-id=157 op=UNLOAD
type=BPF msg=audit(1749911114.550:2979): prog-id=170 op=LOAD
type=BPF msg=audit(1749911114.550:2980): prog-id=171 op=LOAD
type=BPF msg=audit(1749911114.550:2981): prog-id=158 op=UNLOAD
type=BPF msg=audit(1749911114.550:2982): prog-id=159 op=UNLOAD
type=BPF msg=audit(1749911114.551:2983): prog-id=172 op=LOAD
type=BPF msg=audit(1749911114.551:2984): prog-id=160 op=UNLOAD
type=BPF msg=audit(1749911114.554:2985): prog-id=173 op=LOAD
type=BPF msg=audit(1749911114.554:2986): prog-id=174 op=LOAD
type=BPF msg=audit(1749911114.554:2987): prog-id=161 op=UNLOAD
type=BPF msg=audit(1749911114.554:2988): prog-id=162 op=UNLOAD
type=SERVICE_START msg=audit(1749911114.580:2989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911114.599:2990): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911114.599:2991): pid=24850 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911114.602:2992): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.602:2993): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911114.614:2994): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.614:2995): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.615:2996): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911114.639:2997): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.639:2998): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1749911114.639:2999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1749911114.844:3000): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.844:3001): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.845:3002): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24929 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911114.866:3003): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.866:3004): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911114.875:3005): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.875:3006): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.876:3007): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911114.900:3008): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.900:3009): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911114.913:3010): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.913:3011): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.914:3012): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911114.945:3013): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.945:3014): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911114.957:3015): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.957:3016): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.957:3017): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=24987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911114.976:3018): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911114.976:3019): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911114.988:3020): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911114.988:3021): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911114.989:3022): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911115.017:3023): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911115.017:3024): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726769637876766B6D69656A7871707863646A657969777262766A7A7A736B68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313131342E383638363931322D32343932372D3235383130333633323235393235372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911115.018:3025): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911115.020:3026): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1749911124.775:3027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911124.776:3028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911124.786:3029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911124.841:3030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911135.026:3031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911135.026:3032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911135.040:3033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911135.103:3034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911145.275:3035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911145.275:3036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911145.285:3037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911145.347:3038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911150.774:3039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911150.774:3040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1749911150.950:3041): prog-id=175 op=LOAD
type=BPF msg=audit(1749911150.950:3042): prog-id=176 op=LOAD
type=BPF msg=audit(1749911150.950:3043): prog-id=163 op=UNLOAD
type=BPF msg=audit(1749911150.950:3044): prog-id=164 op=UNLOAD
type=BPF msg=audit(1749911150.951:3045): prog-id=177 op=LOAD
type=BPF msg=audit(1749911150.951:3046): prog-id=165 op=UNLOAD
type=BPF msg=audit(1749911150.952:3047): prog-id=178 op=LOAD
type=BPF msg=audit(1749911150.952:3048): prog-id=166 op=UNLOAD
type=BPF msg=audit(1749911150.952:3049): prog-id=179 op=LOAD
type=BPF msg=audit(1749911150.952:3050): prog-id=180 op=LOAD
type=BPF msg=audit(1749911150.952:3051): prog-id=167 op=UNLOAD
type=BPF msg=audit(1749911150.952:3052): prog-id=168 op=UNLOAD
type=BPF msg=audit(1749911150.953:3053): prog-id=181 op=LOAD
type=BPF msg=audit(1749911150.953:3054): prog-id=169 op=UNLOAD
type=BPF msg=audit(1749911150.953:3055): prog-id=182 op=LOAD
type=BPF msg=audit(1749911150.953:3056): prog-id=183 op=LOAD
type=BPF msg=audit(1749911150.953:3057): prog-id=170 op=UNLOAD
type=BPF msg=audit(1749911150.953:3058): prog-id=171 op=UNLOAD
type=BPF msg=audit(1749911150.954:3059): prog-id=184 op=LOAD
type=BPF msg=audit(1749911150.954:3060): prog-id=172 op=UNLOAD
type=BPF msg=audit(1749911150.956:3061): prog-id=185 op=LOAD
type=BPF msg=audit(1749911150.956:3062): prog-id=186 op=LOAD
type=BPF msg=audit(1749911150.957:3063): prog-id=173 op=UNLOAD
type=BPF msg=audit(1749911150.957:3064): prog-id=174 op=UNLOAD
type=SERVICE_START msg=audit(1749911150.979:3065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1749911151.942:3066): table=nat family=2 entries=11 op=xt_replace pid=25316 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911151.942:3066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557a82fde320 items=0 ppid=25299 pid=25316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911151.942:3066): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.010:3067): table=nat family=2 entries=13 op=xt_replace pid=25321 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.010:3067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56136feb5160 items=0 ppid=25299 pid=25321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.010:3067): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1749911152.011:3068): table=filter family=2 entries=23 op=xt_replace pid=25322 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.011:3068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555f84685290 items=0 ppid=25299 pid=25322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.011:3068): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911152.019:3069): table=filter family=2 entries=25 op=xt_replace pid=25325 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.019:3069): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cd3e1e31d0 items=0 ppid=25299 pid=25325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.019:3069): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1749911152.021:3070): table=filter family=2 entries=26 op=xt_replace pid=25329 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.021:3070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5573fbf3e950 items=0 ppid=25299 pid=25329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.021:3070): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1749911152.023:3071): table=filter family=2 entries=27 op=xt_replace pid=25331 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.023:3071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b42a12b490 items=0 ppid=25299 pid=25331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.023:3071): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1749911152.025:3072): table=filter family=2 entries=28 op=xt_replace pid=25333 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.025:3072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5617da036600 items=0 ppid=25299 pid=25333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.025:3072): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1749911152.026:3073): table=nat family=2 entries=14 op=xt_replace pid=25334 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.026:3073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56418aa1a670 items=0 ppid=25299 pid=25334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.026:3073): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.027:3074): table=nat family=2 entries=16 op=xt_replace pid=25335 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.027:3074): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55af67399840 items=0 ppid=25299 pid=25335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.027:3074): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.029:3075): table=nat family=2 entries=18 op=xt_replace pid=25337 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.029:3075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5566558bb690 items=0 ppid=25299 pid=25337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.029:3075): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1749911152.032:3076): table=nat family=2 entries=19 op=xt_replace pid=25339 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.032:3076): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f0133f01e0 items=0 ppid=25299 pid=25339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.032:3076): proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1749911152.034:3077): table=nat family=2 entries=20 op=xt_replace pid=25341 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.034:3077): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56534ed9a2b0 items=0 ppid=25299 pid=25341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.034:3077): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911152.036:3078): table=nat family=2 entries=21 op=xt_replace pid=25343 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.036:3078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561e49566d90 items=0 ppid=25299 pid=25343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.036:3078): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1749911152.038:3079): table=nat family=2 entries=22 op=xt_replace pid=25345 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.038:3079): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c9bd12a9a0 items=0 ppid=25299 pid=25345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.038:3079): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1749911152.085:3080): table=mangle family=2 entries=0 op=xt_register pid=25347 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911152.085:3080): arch=c000003e syscall=175 success=yes exit=0 a0=560dae971ca0 a1=36ce a2=560dae162962 a3=5 items=0 ppid=42 pid=25347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.085:3080): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.086:3081): table=mangle family=2 entries=6 op=xt_replace pid=25346 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.086:3081): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557d3de69bc0 items=0 ppid=25299 pid=25346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.086:3081): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.099:3082): table=nat family=10 entries=0 op=xt_register pid=25352 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911152.099:3082): arch=c000003e syscall=175 success=yes exit=0 a0=5611e8037490 a1=3c26 a2=5611e74cf962 a3=5 items=0 ppid=42 pid=25352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.099:3082): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174
type=NETFILTER_CFG msg=audit(1749911152.100:3083): table=nat family=10 entries=5 op=xt_replace pid=25348 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.100:3083): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ab1b651bf0 items=0 ppid=25299 pid=25348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.100:3083): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.100:3084): table=mangle family=2 entries=8 op=xt_replace pid=25349 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.100:3084): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5602622a1d90 items=0 ppid=25299 pid=25349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.100:3084): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.102:3085): table=nat family=2 entries=23 op=xt_replace pid=25355 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.102:3085): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f9ac6ad670 items=0 ppid=25299 pid=25355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.102:3085): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.102:3086): table=nat family=10 entries=7 op=xt_replace pid=25356 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.102:3086): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5646e0037ac0 items=0 ppid=25299 pid=25356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.102:3086): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1749911152.103:3087): table=filter family=2 entries=29 op=xt_replace pid=25357 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1749911152.103:3087): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559626fee0c0 items=0 ppid=25299 pid=25357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.103:3087): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911152.115:3088): table=filter family=10 entries=0 op=xt_register pid=25359 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911152.115:3088): arch=c000003e syscall=175 success=yes exit=0 a0=55a200cabca0 a1=3616 a2=55a1ff052962 a3=5 items=0 ppid=42 pid=25359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.115:3088): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1749911152.116:3089): table=filter family=10 entries=4 op=xt_replace pid=25358 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.116:3089): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a83c74ea90 items=0 ppid=25299 pid=25358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.116:3089): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911152.119:3090): table=filter family=10 entries=6 op=xt_replace pid=25361 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.119:3090): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55efc12aaad0 items=0 ppid=25299 pid=25361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.119:3090): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1749911152.121:3091): table=filter family=10 entries=7 op=xt_replace pid=25363 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.121:3091): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b3fa1da860 items=0 ppid=25299 pid=25363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.121:3091): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1749911152.123:3092): table=filter family=10 entries=8 op=xt_replace pid=25365 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.123:3092): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5635fa316a50 items=0 ppid=25299 pid=25365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.123:3092): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1749911152.124:3093): table=nat family=10 entries=8 op=xt_replace pid=25366 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.124:3093): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55eec33cb020 items=0 ppid=25299 pid=25366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.124:3093): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.125:3094): table=nat family=10 entries=10 op=xt_replace pid=25367 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.125:3094): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d4354e2270 items=0 ppid=25299 pid=25367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.125:3094): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.127:3095): table=nat family=10 entries=12 op=xt_replace pid=25369 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.127:3095): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55bf58f1f140 items=0 ppid=25299 pid=25369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.127:3095): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1749911152.130:3096): table=nat family=10 entries=13 op=xt_replace pid=25371 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.130:3096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e3dc5ded50 items=0 ppid=25299 pid=25371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.130:3096): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1749911152.132:3097): table=nat family=10 entries=14 op=xt_replace pid=25373 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.132:3097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b1ea212e90 items=0 ppid=25299 pid=25373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.132:3097): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1749911152.135:3098): table=nat family=10 entries=15 op=xt_replace pid=25375 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.135:3098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55be0867a9b0 items=0 ppid=25299 pid=25375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.135:3098): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1749911152.137:3099): table=nat family=10 entries=16 op=xt_replace pid=25377 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.137:3099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5572782c46c0 items=0 ppid=25299 pid=25377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.137:3099): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1749911152.195:3100): table=mangle family=10 entries=0 op=xt_register pid=25379 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1749911152.195:3100): arch=c000003e syscall=175 success=yes exit=0 a0=56384f2d0ca0 a1=34ae a2=56384eb70962 a3=5 items=0 ppid=10 pid=25379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.195:3100): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.196:3101): table=mangle family=10 entries=6 op=xt_replace pid=25378 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.196:3101): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557472768d50 items=0 ppid=25299 pid=25378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.196:3101): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.197:3102): table=mangle family=10 entries=8 op=xt_replace pid=25380 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.197:3102): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556d8f8cef90 items=0 ppid=25299 pid=25380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.197:3102): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911152.198:3103): table=nat family=10 entries=17 op=xt_replace pid=25381 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.198:3103): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b3e897a380 items=0 ppid=25299 pid=25381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.198:3103): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1749911152.199:3104): table=filter family=10 entries=9 op=xt_replace pid=25382 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1749911152.199:3104): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5639f2372540 items=0 ppid=25299 pid=25382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911152.199:3104): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=BPF msg=audit(1749911153.721:3105): prog-id=187 op=LOAD
type=BPF msg=audit(1749911153.722:3106): prog-id=188 op=LOAD
type=SYSCALL msg=audit(1749911153.722:3106): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021bad0 a2=90 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3106): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3107): prog-id=188 op=UNLOAD
type=SYSCALL msg=audit(1749911153.722:3107): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3107): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3108): prog-id=189 op=LOAD
type=SYSCALL msg=audit(1749911153.722:3108): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021bc48 a2=90 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3108): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3109): prog-id=190 op=LOAD
type=SYSCALL msg=audit(1749911153.722:3109): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00021b9d8 a2=90 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3109): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3110): prog-id=190 op=UNLOAD
type=SYSCALL msg=audit(1749911153.722:3110): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3110): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3111): prog-id=189 op=UNLOAD
type=SYSCALL msg=audit(1749911153.722:3111): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3111): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.722:3112): prog-id=191 op=LOAD
type=SYSCALL msg=audit(1749911153.722:3112): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00021beb0 a2=90 a3=0 items=0 ppid=25395 pid=25415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.722:3112): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634626535356535363734623830356563656637313966323536616135
type=BPF msg=audit(1749911153.727:3113): prog-id=192 op=LOAD
type=BPF msg=audit(1749911153.727:3114): prog-id=193 op=LOAD
type=SYSCALL msg=audit(1749911153.727:3114): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3114): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3115): prog-id=193 op=UNLOAD
type=SYSCALL msg=audit(1749911153.727:3115): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3115): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3116): prog-id=194 op=LOAD
type=SYSCALL msg=audit(1749911153.727:3116): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3116): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3117): prog-id=195 op=LOAD
type=SYSCALL msg=audit(1749911153.727:3117): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3117): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3118): prog-id=195 op=UNLOAD
type=SYSCALL msg=audit(1749911153.727:3118): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3118): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3119): prog-id=194 op=UNLOAD
type=SYSCALL msg=audit(1749911153.727:3119): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3119): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.727:3120): prog-id=196 op=LOAD
type=SYSCALL msg=audit(1749911153.727:3120): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=25417 pid=25438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.727:3120): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636362636537396466343431373832306637386332326332333432
type=BPF msg=audit(1749911153.751:3121): prog-id=197 op=LOAD
type=BPF msg=audit(1749911153.752:3122): prog-id=198 op=LOAD
type=SYSCALL msg=audit(1749911153.752:3122): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7ad0 a2=90 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.752:3122): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.752:3123): prog-id=198 op=UNLOAD
type=SYSCALL msg=audit(1749911153.752:3123): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.752:3123): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.755:3124): prog-id=199 op=LOAD
type=SYSCALL msg=audit(1749911153.755:3124): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7c48 a2=90 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.755:3124): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.755:3125): prog-id=200 op=LOAD
type=SYSCALL msg=audit(1749911153.755:3125): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b79d8 a2=90 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.755:3125): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.755:3126): prog-id=200 op=UNLOAD
type=SYSCALL msg=audit(1749911153.755:3126): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.755:3126): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.755:3127): prog-id=199 op=UNLOAD
type=SYSCALL msg=audit(1749911153.755:3127): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.755:3127): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.755:3128): prog-id=201 op=LOAD
type=SYSCALL msg=audit(1749911153.755:3128): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7eb0 a2=90 a3=0 items=0 ppid=25452 pid=25491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.755:3128): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613635326563303564373265303131633166643836373832373361
type=BPF msg=audit(1749911153.757:3129): prog-id=202 op=LOAD
type=BPF msg=audit(1749911153.759:3130): prog-id=203 op=LOAD
type=SYSCALL msg=audit(1749911153.759:3130): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3130): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3131): prog-id=203 op=UNLOAD
type=SYSCALL msg=audit(1749911153.759:3131): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3131): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3132): prog-id=204 op=LOAD
type=SYSCALL msg=audit(1749911153.759:3132): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3132): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3133): prog-id=205 op=LOAD
type=SYSCALL msg=audit(1749911153.759:3133): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3133): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3134): prog-id=205 op=UNLOAD
type=SYSCALL msg=audit(1749911153.759:3134): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3134): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3135): prog-id=204 op=UNLOAD
type=SYSCALL msg=audit(1749911153.759:3135): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3135): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.759:3136): prog-id=206 op=LOAD
type=SYSCALL msg=audit(1749911153.759:3136): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=25499 pid=25515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.759:3136): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334636531393962383539613865383533353262323461363835653466
type=BPF msg=audit(1749911153.840:3137): prog-id=207 op=LOAD
type=BPF msg=audit(1749911153.841:3138): prog-id=208 op=LOAD
type=SYSCALL msg=audit(1749911153.841:3138): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.841:3138): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.841:3139): prog-id=208 op=UNLOAD
type=SYSCALL msg=audit(1749911153.841:3139): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.841:3139): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.841:3140): prog-id=209 op=LOAD
type=SYSCALL msg=audit(1749911153.841:3140): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.841:3140): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.841:3141): prog-id=210 op=LOAD
type=SYSCALL msg=audit(1749911153.841:3141): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.841:3141): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.841:3142): prog-id=210 op=UNLOAD
type=SYSCALL msg=audit(1749911153.841:3142): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.841:3142): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.842:3143): prog-id=209 op=UNLOAD
type=SYSCALL msg=audit(1749911153.842:3143): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.842:3143): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.842:3144): prog-id=211 op=LOAD
type=SYSCALL msg=audit(1749911153.842:3144): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=25395 pid=25577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.842:3144): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261366231373765633733616433633338623632663664613665356536
type=BPF msg=audit(1749911153.906:3145): prog-id=212 op=LOAD
type=BPF msg=audit(1749911153.909:3146): prog-id=213 op=LOAD
type=BPF msg=audit(1749911153.909:3147): prog-id=214 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3147): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3147): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3148): prog-id=214 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3148): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3148): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3149): prog-id=215 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3149): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000149ad0 a2=90 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3149): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3150): prog-id=215 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3150): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3150): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3151): prog-id=216 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3151): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3151): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3152): prog-id=217 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3152): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3152): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3153): prog-id=217 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3153): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3153): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3154): prog-id=216 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3154): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3154): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3155): prog-id=218 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3155): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000149c48 a2=90 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3155): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3156): prog-id=219 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3156): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001499d8 a2=90 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3156): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3157): prog-id=219 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3157): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3157): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3158): prog-id=218 op=UNLOAD
type=SYSCALL msg=audit(1749911153.909:3158): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3158): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.909:3159): prog-id=220 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3159): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=25452 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3159): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616563653764613238353164643934396430326334383363633530
type=BPF msg=audit(1749911153.909:3160): prog-id=221 op=LOAD
type=SYSCALL msg=audit(1749911153.909:3160): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000149eb0 a2=90 a3=0 items=0 ppid=25417 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.909:3160): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656433386564346536633837616431303864383736373634656630
type=BPF msg=audit(1749911153.919:3161): prog-id=222 op=LOAD
type=BPF msg=audit(1749911153.920:3162): prog-id=223 op=LOAD
type=SYSCALL msg=audit(1749911153.920:3162): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000149ad0 a2=90 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3162): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3163): prog-id=223 op=UNLOAD
type=SYSCALL msg=audit(1749911153.920:3163): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3164): prog-id=224 op=LOAD
type=SYSCALL msg=audit(1749911153.920:3164): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000149c48 a2=90 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3164): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3165): prog-id=225 op=LOAD
type=SYSCALL msg=audit(1749911153.920:3165): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001499d8 a2=90 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3165): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3166): prog-id=225 op=UNLOAD
type=SYSCALL msg=audit(1749911153.920:3166): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3166): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3167): prog-id=224 op=UNLOAD
type=SYSCALL msg=audit(1749911153.920:3167): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3167): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911153.920:3168): prog-id=226 op=LOAD
type=SYSCALL msg=audit(1749911153.920:3168): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000149eb0 a2=90 a3=0 items=0 ppid=25499 pid=25645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911153.920:3168): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636656464333838386566633636616537666330343937393033646565
type=BPF msg=audit(1749911159.214:3169): prog-id=227 op=LOAD
type=BPF msg=audit(1749911159.214:3170): prog-id=228 op=LOAD
type=BPF msg=audit(1749911159.214:3171): prog-id=175 op=UNLOAD
type=BPF msg=audit(1749911159.214:3172): prog-id=176 op=UNLOAD
type=BPF msg=audit(1749911159.215:3173): prog-id=229 op=LOAD
type=BPF msg=audit(1749911159.215:3174): prog-id=177 op=UNLOAD
type=BPF msg=audit(1749911159.216:3175): prog-id=230 op=LOAD
type=BPF msg=audit(1749911159.216:3176): prog-id=178 op=UNLOAD
type=BPF msg=audit(1749911159.216:3177): prog-id=231 op=LOAD
type=BPF msg=audit(1749911159.216:3178): prog-id=232 op=LOAD
type=BPF msg=audit(1749911159.216:3179): prog-id=179 op=UNLOAD
type=BPF msg=audit(1749911159.216:3180): prog-id=180 op=UNLOAD
type=BPF msg=audit(1749911159.217:3181): prog-id=233 op=LOAD
type=BPF msg=audit(1749911159.217:3182): prog-id=181 op=UNLOAD
type=BPF msg=audit(1749911159.217:3183): prog-id=234 op=LOAD
type=BPF msg=audit(1749911159.217:3184): prog-id=235 op=LOAD
type=BPF msg=audit(1749911159.217:3185): prog-id=182 op=UNLOAD
type=BPF msg=audit(1749911159.217:3186): prog-id=183 op=UNLOAD
type=BPF msg=audit(1749911159.218:3187): prog-id=236 op=LOAD
type=BPF msg=audit(1749911159.218:3188): prog-id=213 op=UNLOAD
type=BPF msg=audit(1749911159.219:3189): prog-id=237 op=LOAD
type=BPF msg=audit(1749911159.219:3190): prog-id=184 op=UNLOAD
type=BPF msg=audit(1749911159.219:3191): prog-id=238 op=LOAD
type=BPF msg=audit(1749911159.219:3192): prog-id=197 op=UNLOAD
type=BPF msg=audit(1749911159.220:3193): prog-id=239 op=LOAD
type=BPF msg=audit(1749911159.220:3194): prog-id=202 op=UNLOAD
type=BPF msg=audit(1749911159.221:3195): prog-id=240 op=LOAD
type=BPF msg=audit(1749911159.221:3196): prog-id=187 op=UNLOAD
type=BPF msg=audit(1749911159.223:3197): prog-id=241 op=LOAD
type=BPF msg=audit(1749911159.223:3198): prog-id=192 op=UNLOAD
type=BPF msg=audit(1749911159.223:3199): prog-id=242 op=LOAD
type=BPF msg=audit(1749911159.223:3200): prog-id=243 op=LOAD
type=BPF msg=audit(1749911159.223:3201): prog-id=185 op=UNLOAD
type=BPF msg=audit(1749911159.223:3202): prog-id=186 op=UNLOAD
type=BPF msg=audit(1749911159.224:3203): prog-id=244 op=LOAD
type=BPF msg=audit(1749911159.224:3204): prog-id=222 op=UNLOAD
type=BPF msg=audit(1749911159.224:3205): prog-id=245 op=LOAD
type=BPF msg=audit(1749911159.224:3206): prog-id=207 op=UNLOAD
type=BPF msg=audit(1749911159.225:3207): prog-id=246 op=LOAD
type=BPF msg=audit(1749911159.225:3208): prog-id=212 op=UNLOAD
type=SERVICE_STOP msg=audit(1749911159.255:3209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1749911159.263:3210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1749911159.468:3211): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911159.468:3212): pid=25023 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911159.472:3213): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.472:3214): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.484:3215): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.484:3216): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.485:3217): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911159.507:3218): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.507:3219): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.721:3220): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.721:3221): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.722:3222): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911159.739:3223): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.739:3224): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.749:3225): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.749:3226): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.750:3227): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911159.773:3228): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.773:3229): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.787:3230): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.787:3231): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.787:3232): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911159.816:3233): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.816:3234): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.827:3235): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.827:3236): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.827:3237): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911159.847:3238): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911159.847:3239): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911159.858:3240): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911159.858:3241): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911159.859:3242): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911159.887:3243): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911159.887:3244): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A7576716165746D6A676F79627271776B737872697574676D6E7177626C68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313135392E373431393036342D32353835392D36363632373536343437303039302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911159.888:3245): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911159.890:3246): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911160.073:3247): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911160.073:3248): pid=25955 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911160.075:3249): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.075:3250): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.085:3251): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.085:3252): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.086:3253): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911160.107:3254): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.107:3255): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.426:3256): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.426:3257): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.427:3258): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=25993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911160.448:3259): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.448:3260): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.458:3261): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.458:3262): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.459:3263): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911160.485:3264): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.485:3265): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.502:3266): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.502:3267): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.503:3268): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911160.537:3269): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.537:3270): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.549:3271): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.549:3272): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.550:3273): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911160.576:3274): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.576:3275): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.587:3276): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.587:3277): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.588:3278): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911160.615:3279): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911160.615:3280): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7071737066766D70796D727A6D6468657A7178677366787374666D65636F62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136302E343530383433382D32353939312D3132393339383535393832323434332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911160.616:3281): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911160.618:3282): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911160.969:3283): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911160.970:3284): pid=26088 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911160.972:3285): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911160.972:3286): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911160.984:3287): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911160.984:3288): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911160.985:3289): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.006:3290): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.006:3291): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.442:3292): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.442:3293): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.442:3294): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26130 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.461:3295): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.461:3296): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.470:3297): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.470:3298): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.471:3299): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.493:3300): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.493:3301): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.513:3302): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.513:3303): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.514:3304): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.542:3305): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.542:3306): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.551:3307): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.551:3308): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.552:3309): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.571:3310): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.571:3311): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.581:3312): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.581:3313): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.582:3314): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26206 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911161.612:3315): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911161.612:3316): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777462766E676B6A6D747A726B74636672667A637A736E777A6E7779676B706F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136312E343633353237322D32363132382D3137393837383931363537313737302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911161.613:3317): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911161.614:3318): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911161.746:3319): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911161.746:3320): pid=26224 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911161.749:3321): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.749:3322): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.764:3323): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.764:3324): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.765:3325): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.788:3326): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.788:3327): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.798:3328): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.798:3329): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.799:3330): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26246 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.820:3331): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.820:3332): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.951:3333): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.951:3334): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.952:3335): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911161.982:3336): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911161.982:3337): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911161.994:3338): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911161.994:3339): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911161.995:3340): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.017:3341): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.017:3342): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.027:3343): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.027:3344): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.028:3345): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911162.057:3346): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911162.057:3347): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66666B646E677464656F6F7379757866786C636D647A77757A67727572696C73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136312E343633353237322D32363132382D3137393837383931363537313737302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911162.057:3348): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911162.059:3349): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911162.212:3350): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911162.212:3351): pid=26318 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911162.214:3352): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.214:3353): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.224:3354): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.224:3355): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.225:3356): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.246:3357): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.246:3358): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.429:3359): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.429:3360): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.430:3361): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.448:3362): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.448:3363): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.457:3364): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.457:3365): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.458:3366): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.482:3367): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.482:3368): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.496:3369): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.496:3370): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.497:3371): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.529:3372): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.529:3373): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.539:3374): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.539:3375): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.539:3376): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911162.562:3377): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911162.562:3378): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911162.574:3379): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911162.574:3380): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911162.575:3381): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911162.604:3382): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911162.604:3383): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65707770696D6B6B7661706B7A6563616B786B686A6B6662696367717464726E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136322E343530333336372D32363334302D3230343335303536363730353233332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911162.604:3384): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911162.606:3385): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911163.405:3386): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911163.405:3387): pid=26436 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911163.407:3388): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.407:3389): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.417:3390): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.417:3391): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.418:3392): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.438:3393): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.438:3394): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.600:3395): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.600:3396): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.601:3397): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.620:3398): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.620:3399): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.629:3400): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.629:3401): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.630:3402): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.652:3403): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.652:3404): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.666:3405): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.666:3406): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.667:3407): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.698:3408): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.698:3409): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.708:3410): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.708:3411): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.709:3412): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26524 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.728:3413): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.728:3414): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.737:3415): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.737:3416): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.738:3417): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911163.765:3418): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911163.765:3419): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78687A707864727167686173786B6E6B796877617877647176636E656E6B7763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136332E363232333436362D32363436342D32373733323930343639393634382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911163.766:3420): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911163.767:3421): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911163.957:3422): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911163.957:3423): pid=26560 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911163.959:3424): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.960:3425): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911163.969:3426): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911163.969:3427): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911163.970:3428): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911163.989:3429): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911163.989:3430): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.551:3431): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.551:3432): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.552:3433): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911164.570:3434): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.570:3435): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.579:3436): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.579:3437): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.580:3438): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911164.602:3439): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.602:3440): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.616:3441): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.616:3442): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.617:3443): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911164.644:3444): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.644:3445): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.654:3446): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.654:3447): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.655:3448): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26657 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911164.674:3449): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.674:3450): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.683:3451): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.683:3452): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.684:3453): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26675 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911164.710:3454): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911164.710:3455): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62636E7A6D77706464627374616775666C616264716C696F76767462746B6777203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136342E353732333839342D32363539372D3232383234383736333937363338312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911164.711:3456): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911164.712:3457): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911164.909:3458): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911164.909:3459): pid=26693 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911164.911:3460): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.911:3461): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911164.921:3462): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911164.921:3463): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911164.921:3464): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911164.941:3465): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911164.941:3466): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.166:3467): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.166:3468): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.167:3469): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.185:3470): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.185:3471): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.194:3472): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.194:3473): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.195:3474): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.217:3475): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.217:3476): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.230:3477): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.230:3478): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.231:3479): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26767 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.261:3480): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.261:3481): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.271:3482): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.271:3483): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.272:3484): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.293:3485): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.293:3486): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.303:3487): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.303:3488): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.304:3489): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911165.332:3490): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911165.332:3491): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78737970717064757A616E6B74786871756A627A6A6161687A6B686869697169203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136352E313837353438322D32363732342D32303234363932363635353234392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911165.332:3492): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911165.334:3493): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911165.544:3494): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911165.545:3495): pid=26820 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911165.547:3496): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.547:3497): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.557:3498): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.557:3499): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.558:3500): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.578:3501): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.578:3502): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.812:3503): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.812:3504): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.813:3505): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.833:3506): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.833:3507): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.842:3508): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.842:3509): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.843:3510): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.865:3511): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.865:3512): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.878:3513): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.878:3514): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.879:3515): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.908:3516): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.908:3517): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.920:3518): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.921:3519): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.922:3520): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911165.941:3521): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911165.941:3522): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911165.951:3523): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911165.951:3524): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911165.952:3525): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911165.979:3526): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911165.979:3527): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7079737178776D686A6B6D756A706277786279686E676C7778676C6D617A726A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734393931313136352E383335323831382D32363834392D3235363134323238373333313834392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911165.979:3528): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911165.980:3529): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911166.174:3530): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911166.174:3531): pid=26945 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911166.177:3532): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911166.177:3533): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1749911166.186:3534): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911166.186:3535): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911166.187:3536): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=26955 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911166.206:3537): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911166.206:3538): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911166.309:3539): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14570 suid=1000 rport=58578 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911166.309:3540): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911166.311:3541): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911166.311:3542): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1749911166.311:3543): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911166.312:3544): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911166.312:3545): pid=14567 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=14567 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=BPF msg=audit(1749911174.812:3546): prog-id=247 op=LOAD
type=BPF msg=audit(1749911174.812:3547): prog-id=248 op=LOAD
type=SYSCALL msg=audit(1749911174.812:3547): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000193ad0 a2=90 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.812:3547): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3548): prog-id=248 op=UNLOAD
type=SYSCALL msg=audit(1749911174.813:3548): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3548): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3549): prog-id=249 op=LOAD
type=SYSCALL msg=audit(1749911174.813:3549): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000193c48 a2=90 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3549): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3550): prog-id=250 op=LOAD
type=SYSCALL msg=audit(1749911174.813:3550): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001939d8 a2=90 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3550): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3551): prog-id=250 op=UNLOAD
type=SYSCALL msg=audit(1749911174.813:3551): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3551): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3552): prog-id=249 op=UNLOAD
type=SYSCALL msg=audit(1749911174.813:3552): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=0 a2=0 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3552): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.813:3553): prog-id=251 op=LOAD
type=SYSCALL msg=audit(1749911174.813:3553): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000193eb0 a2=90 a3=0 items=0 ppid=27004 pid=27016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.813:3553): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261303730623538336433336536333430376231626335306633393934
type=BPF msg=audit(1749911174.897:3554): prog-id=252 op=LOAD
type=SYSCALL msg=audit(1749911174.897:3554): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=27004 pid=27047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.897:3554): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643836663230366535373961376332666634663964366538373630
type=BPF msg=audit(1749911174.897:3555): prog-id=253 op=LOAD
type=SYSCALL msg=audit(1749911174.897:3555): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=27004 pid=27047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.897:3555): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643836663230366535373961376332666634663964366538373630
type=BPF msg=audit(1749911174.897:3556): prog-id=253 op=UNLOAD
type=SYSCALL msg=audit(1749911174.897:3556): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=27004 pid=27047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.897:3556): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643836663230366535373961376332666634663964366538373630
type=BPF msg=audit(1749911174.897:3557): prog-id=252 op=UNLOAD
type=SYSCALL msg=audit(1749911174.897:3557): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=0 a2=0 a3=0 items=0 ppid=27004 pid=27047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=close AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.897:3557): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643836663230366535373961376332666634663964366538373630
type=BPF msg=audit(1749911174.897:3558): prog-id=254 op=LOAD
type=SYSCALL msg=audit(1749911174.897:3558): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=27004 pid=27047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911174.897:3558): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534643836663230366535373961376332666634663964366538373630
type=NETFILTER_CFG msg=audit(1749911175.108:3559): table=mangle family=2 entries=10 op=xt_replace pid=27112 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.108:3559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559bf6264f40 items=0 ppid=27059 pid=27112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.108:3559): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911175.109:3560): table=mangle family=10 entries=10 op=xt_replace pid=27113 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.109:3560): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564d2833f1b0 items=0 ppid=27059 pid=27113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.109:3560): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1749911175.110:3561): table=nat family=2 entries=25 op=xt_replace pid=27116 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.110:3561): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5597c6184820 items=0 ppid=27059 pid=27116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.110:3561): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1749911175.111:3562): table=nat family=10 entries=19 op=xt_replace pid=27117 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.111:3562): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560935b7f5a0 items=0 ppid=27059 pid=27117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.111:3562): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1749911175.112:3563): table=filter family=10 entries=11 op=xt_replace pid=27119 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.112:3563): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=555e5e479760 items=0 ppid=27059 pid=27119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.112:3563): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.211:3564): table=filter family=2 entries=31 op=xt_replace pid=27118 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.211:3564): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ebc4304260 items=0 ppid=27059 pid=27118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.211:3564): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.215:3565): table=filter family=2 entries=33 op=xt_replace pid=27121 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.215:3565): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5599f8810440 items=0 ppid=27059 pid=27121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.215:3565): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.218:3566): table=filter family=2 entries=35 op=xt_replace pid=27123 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.218:3566): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e0774c4770 items=0 ppid=27059 pid=27123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.218:3566): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365
type=NETFILTER_CFG msg=audit(1749911175.221:3567): table=filter family=2 entries=36 op=xt_replace pid=27126 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.221:3567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559c5ba07ca0 items=0 ppid=27059 pid=27126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.221:3567): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669
type=NETFILTER_CFG msg=audit(1749911175.222:3568): table=filter family=2 entries=37 op=xt_replace pid=27127 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.222:3568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cf7c0e80b0 items=0 ppid=27059 pid=27127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.222:3568): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.224:3569): table=filter family=2 entries=39 op=xt_replace pid=27129 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.224:3569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eace340940 items=0 ppid=27059 pid=27129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.224:3569): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1749911175.225:3570): table=filter family=2 entries=40 op=xt_replace pid=27130 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.225:3570): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b5579db640 items=0 ppid=27059 pid=27130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.225:3570): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.228:3571): table=filter family=2 entries=42 op=xt_replace pid=27132 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.228:3571): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55675ba55980 items=0 ppid=27059 pid=27132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.228:3571): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1749911175.231:3572): table=filter family=2 entries=43 op=xt_replace pid=27135 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.231:3572): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5605d31c7ed0 items=0 ppid=27059 pid=27135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.231:3572): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53
type=NETFILTER_CFG msg=audit(1749911175.232:3573): table=filter family=2 entries=44 op=xt_replace pid=27136 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.232:3573): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56448694e2c0 items=0 ppid=27059 pid=27136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.232:3573): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.234:3574): table=filter family=2 entries=46 op=xt_replace pid=27138 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.234:3574): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557c21716b40 items=0 ppid=27059 pid=27138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.234:3574): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1749911175.235:3575): table=nat family=2 entries=27 op=xt_replace pid=27139 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.235:3575): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ab383599f0 items=0 ppid=27059 pid=27139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.235:3575): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1749911175.237:3576): table=nat family=2 entries=29 op=xt_replace pid=27141 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.237:3576): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56070333c280 items=0 ppid=27059 pid=27141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.237:3576): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1749911175.240:3577): table=nat family=2 entries=30 op=xt_replace pid=27144 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1749911175.240:3577): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b1123cc630 items=0 ppid=27059 pid=27144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.240:3577): proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1749911175.255:3578): table=filter family=2 entries=47 op=xt_replace pid=27150 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1749911175.255:3578): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b2d2131110 items=0 ppid=27059 pid=27150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.255:3578): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1749911175.260:3579): table=nat family=2 entries=31 op=xt_replace pid=27150 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1749911175.260:3579): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b2d2134f50 items=0 ppid=27059 pid=27150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.260:3579): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1749911175.262:3580): table=filter family=10 entries=13 op=xt_replace pid=27153 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.262:3580): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558a8a1629a0 items=0 ppid=27059 pid=27153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.262:3580): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.265:3581): table=filter family=10 entries=15 op=xt_replace pid=27155 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.265:3581): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5618c9084d90 items=0 ppid=27059 pid=27155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.265:3581): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963
type=NETFILTER_CFG msg=audit(1749911175.269:3582): table=filter family=10 entries=16 op=xt_replace pid=27158 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.269:3582): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55810286a320 items=0 ppid=27059 pid=27158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.269:3582): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276
type=NETFILTER_CFG msg=audit(1749911175.270:3583): table=filter family=10 entries=17 op=xt_replace pid=27159 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.270:3583): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562f67510760 items=0 ppid=27059 pid=27159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.270:3583): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.272:3584): table=filter family=10 entries=19 op=xt_replace pid=27161 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.272:3584): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556b9d5390b0 items=0 ppid=27059 pid=27161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.272:3584): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1749911175.273:3585): table=filter family=10 entries=20 op=xt_replace pid=27162 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.273:3585): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e4fb1c8dd0 items=0 ppid=27059 pid=27162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.273:3585): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.275:3586): table=filter family=10 entries=22 op=xt_replace pid=27164 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.275:3586): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5589dbd0f1c0 items=0 ppid=27059 pid=27164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.275:3586): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245
type=NETFILTER_CFG msg=audit(1749911175.279:3587): table=filter family=10 entries=23 op=xt_replace pid=27167 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.279:3587): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d825f12770 items=0 ppid=27059 pid=27167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.279:3587): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1749911175.280:3588): table=filter family=10 entries=24 op=xt_replace pid=27168 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.280:3588): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5589ecc13b90 items=0 ppid=27059 pid=27168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.280:3588): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1749911175.282:3589): table=filter family=10 entries=26 op=xt_replace pid=27170 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.282:3589): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55597330c4e0 items=0 ppid=27059 pid=27170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.282:3589): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1749911175.283:3590): table=nat family=10 entries=21 op=xt_replace pid=27171 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.283:3590): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560b3c23a7e0 items=0 ppid=27059 pid=27171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.283:3590): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1749911175.285:3591): table=nat family=10 entries=23 op=xt_replace pid=27173 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.285:3591): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55581f0b3140 items=0 ppid=27059 pid=27173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.285:3591): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1749911175.288:3592): table=nat family=10 entries=24 op=xt_replace pid=27176 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1749911175.288:3592): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564397f41570 items=0 ppid=27059 pid=27176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.288:3592): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1749911175.294:3593): table=filter family=10 entries=27 op=xt_replace pid=27182 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1749911175.294:3593): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5647003ae930 items=0 ppid=27059 pid=27182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.294:3593): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1749911175.295:3594): table=nat family=10 entries=25 op=xt_replace pid=27182 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1749911175.295:3594): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5647003b0910 items=0 ppid=27059 pid=27182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911175.295:3594): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1749911226.265:3595): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15278 suid=1000 rport=57890 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911226.266:3596): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15278 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911226.269:3597): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911226.269:3598): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911226.270:3599): pid=15270 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=15270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1749911236.284:3600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911236.303:3601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911317.250:3602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1749911412.050:3603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=packagekit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911583.998:3604): pid=27233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911583.999:3605): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27233 suid=74 rport=58792 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911583.999:3606): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27233 suid=74 rport=58792 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911584.057:3607): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.057:3608): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911584.068:3609): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.069:3610): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27233 suid=74 rport=58792 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911584.070:3611): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911584.071:3612): pid=27232 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911584.071:3612): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff2771660 a2=4 a3=3e8 items=0 ppid=1137 pid=27232 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911584.071:3612): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911584.071:3613): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749911584.101:3614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911584.110:3615): pid=27236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1749911584.110:3616): pid=27236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1749911584.110:3617): pid=27236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911584.110:3618): pid=27236 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911584.110:3618): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe79d864d0 a2=4 a3=3e8 items=0 ppid=1 pid=27236 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911584.110:3618): proctitle="(systemd)"
type=USER_START msg=audit(1749911584.113:3619): pid=27236 uid=0 auid=1000 ses=28 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_umask,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1749911584.218:3620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1749911584.224:3621): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.225:3622): pid=27245 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27245 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911584.225:3623): pid=27245 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911584.271:3624): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911584.271:3625): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.272:3626): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27246 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911584.292:3627): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911584.292:3628): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.292:3629): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27245 suid=1000 rport=58792 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.292:3630): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27245 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911584.294:3631): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911584.294:3632): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.294:3633): pid=27232 uid=0 auid=1000 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749911584.317:3634): pid=27263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911584.318:3635): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27263 suid=74 rport=58794 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911584.318:3636): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27263 suid=74 rport=58794 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911584.381:3637): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.381:3638): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911584.391:3639): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.391:3640): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27263 suid=74 rport=58794 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911584.392:3641): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911584.393:3642): pid=27262 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911584.393:3642): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeea3b7b60 a2=4 a3=3e8 items=0 ppid=1137 pid=27262 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911584.393:3642): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911584.393:3643): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911584.414:3644): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.415:3645): pid=27265 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911584.415:3646): pid=27265 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911584.458:3647): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911584.458:3648): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.460:3649): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911584.682:3650): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911584.682:3651): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.682:3652): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27265 suid=1000 rport=58794 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.682:3653): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911584.684:3654): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911584.684:3655): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.684:3656): pid=27262 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749911584.698:3657): pid=27284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911584.699:3658): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27284 suid=74 rport=58796 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911584.699:3659): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27284 suid=74 rport=58796 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911584.758:3660): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.758:3661): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911584.768:3662): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911584.769:3663): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27284 suid=74 rport=58796 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911584.770:3664): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911584.770:3665): pid=27283 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911584.770:3665): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffec3514c80 a2=4 a3=3e8 items=0 ppid=1137 pid=27283 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911584.770:3665): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911584.771:3666): pid=27283 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911584.785:3667): pid=27283 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.787:3668): pid=27287 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911584.788:3669): pid=27287 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911584.831:3670): pid=27283 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911584.831:3671): pid=27283 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.832:3672): pid=27283 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911584.931:3673): pid=27381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911584.932:3674): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27381 suid=74 rport=33198 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911584.932:3675): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27381 suid=74 rport=33198 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1749911585.031:3676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1749911585.057:3677): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.057:3678): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5e:95:40:d2:39:9c:e0:ba:f3:12:b5:21:28:ab:dc:a9:c8:48:91:ce:3b:b6:b2:46:f9:05:e6:4f:d0:09:04:09 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911585.068:3679): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.068:3680): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27381 suid=74 rport=33198 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911585.070:3681): pid=27380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911585.070:3682): pid=27380 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911585.070:3682): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe337ab8e0 a2=4 a3=3e8 items=0 ppid=1137 pid=27380 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911585.070:3682): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911585.070:3683): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911585.090:3684): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.091:3685): pid=27386 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911585.092:3686): pid=27386 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911585.133:3687): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911585.133:3688): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.134:3689): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.152:3690): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911585.152:3691): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.152:3692): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27386 suid=1000 rport=33198 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.152:3693): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.153:3694): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911585.154:3695): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.154:3696): pid=27380 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749911585.171:3697): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27406 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911585.172:3698): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27406 suid=74 rport=33214 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911585.172:3699): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27406 suid=74 rport=33214 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911585.241:3700): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.241:3701): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5e:95:40:d2:39:9c:e0:ba:f3:12:b5:21:28:ab:dc:a9:c8:48:91:ce:3b:b6:b2:46:f9:05:e6:4f:d0:09:04:09 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911585.252:3702): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.252:3703): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27406 suid=74 rport=33214 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911585.254:3704): pid=27405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911585.254:3705): pid=27405 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911585.254:3705): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff5c52e310 a2=4 a3=3e8 items=0 ppid=1137 pid=27405 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911585.254:3705): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911585.254:3706): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911585.268:3707): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.270:3708): pid=27408 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911585.270:3709): pid=27408 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911585.312:3710): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911585.312:3711): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.313:3712): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27409 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.335:3713): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911585.335:3714): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.335:3715): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27408 suid=1000 rport=33214 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.336:3716): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.337:3717): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911585.337:3718): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.338:3719): pid=27405 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749911585.356:3720): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911585.356:3721): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27428 suid=74 rport=33222 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911585.356:3722): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27428 suid=74 rport=33222 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911585.424:3723): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.424:3724): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5e:95:40:d2:39:9c:e0:ba:f3:12:b5:21:28:ab:dc:a9:c8:48:91:ce:3b:b6:b2:46:f9:05:e6:4f:d0:09:04:09 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911585.434:3725): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.435:3726): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27428 suid=74 rport=33222 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911585.436:3727): pid=27427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911585.436:3728): pid=27427 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911585.436:3728): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe20f24180 a2=4 a3=3e8 items=0 ppid=1137 pid=27427 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911585.436:3728): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911585.437:3729): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911585.454:3730): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.455:3731): pid=27430 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911585.456:3732): pid=27430 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911585.498:3733): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911585.498:3734): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.499:3735): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.521:3736): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1749911585.521:3737): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.521:3738): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27430 suid=1000 rport=33222 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.522:3739): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27430 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1749911585.523:3740): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1749911585.523:3741): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.523:3742): pid=27427 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1749911585.537:3743): pid=27449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1749911585.538:3744): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27449 suid=74 rport=33230 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1749911585.538:3745): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27449 suid=74 rport=33230 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1749911585.605:3746): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.605:3747): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5e:95:40:d2:39:9c:e0:ba:f3:12:b5:21:28:ab:dc:a9:c8:48:91:ce:3b:b6:b2:46:f9:05:e6:4f:d0:09:04:09 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1749911585.616:3748): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1749911585.616:3749): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27449 suid=74 rport=33230 laddr=10.0.0.254 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1749911585.618:3750): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1749911585.618:3751): pid=27448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1749911585.618:3751): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe243a9630 a2=4 a3=3e8 items=0 ppid=1137 pid=27448 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1749911585.618:3751): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1749911585.618:3752): pid=27448 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1749911585.637:3753): pid=27448 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.637:3754): pid=27451 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1749911585.638:3755): pid=27451 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.254 addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1749911585.680:3756): pid=27448 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1749911585.680:3757): pid=27448 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.254 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1749911585.681:3758): pid=27448 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:4c:93:c1:c8:60:09:e9:2d:52:50:70:c8:dc:66:fd:0b:dd:f3:93:48:93:ec:7c:6d:e1:be:c6:8d:ae:81:0e:d8 direction=? spid=27452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1749911585.763:3759): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911585.764:3760): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F6574632F6368726F6E792E636F6E66202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911585.764:3761): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911585.766:3762): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911585.768:3763): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911585.769:3764): pid=27502 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749911585.783:3765): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911585.783:3766): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F7661722F6C6F672F6D65737361676573202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911585.783:3767): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911585.785:3768): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1749911585.788:3769): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1749911585.789:3770): pid=27507 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1749911585.800:3771): pid=27511 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1749911585.801:3772): pid=27511 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=62617368202D63206370202D72202F7661722F6C6F672F61756469742F2A202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F61756469742F20323E2F6465762F6E756C6C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1749911585.801:3773): pid=27511 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1749911585.802:3774): pid=27511 uid=1000 auid=1000 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"